last executing test programs: 26m0.072739977s ago: executing program 4 (id=1460): mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r3, &(0x7f0000000140)=[{}], 0x1, 0xffffffff) syz_emit_ethernet(0xfffffffffffffd58, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0xa, 0x4c, 0x64, 0x0, 0x7, 0x6, 0x0, @local, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x26, 0x6071, 0x0, 0x814, {[@generic={0x8, 0xa, "fd8bd2a498c327ae"}, @fastopen={0x22, 0x2}, @exp_smc={0xfe, 0x6}, @mptcp=@synack={0x1e, 0x10, 0x6, 0x2, 0x0, 0x4000000000, 0xdffffff8}]}}}}}}}, 0x0) 25m59.09620007s ago: executing program 4 (id=1464): r0 = userfaultfd(0x1) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x19) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020301040000000000000000000040200800010001"], 0x1c}}, 0x0) (async) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) close_range(r0, 0xffffffffffffffff, 0x0) 25m58.779500398s ago: executing program 4 (id=1465): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000080), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xff}]}}}]}, 0x3c}}, 0x0) r3 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/hibernate_compression_threads', 0x60a02, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0) sendfile(r4, r4, 0x0, 0x3) wait4(r3, 0x0, 0x0, &(0x7f0000001140)) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setattr(r3, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x2000000, 0x400003}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r6, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x7c) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc04f01f56bb6e284f5fab5c66", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x800) r9 = openat$fb0(0xffffff9c, &(0x7f0000000a00), 0x80, 0x0) ioctl$FBIOPUTCMAP(r9, 0x4605, &(0x7f0000000b40)={0x6, 0x6, &(0x7f0000001100)=[0x694b, 0x1, 0xffff, 0x6, 0x81, 0xffff], &(0x7f0000000a80), &(0x7f0000001100), &(0x7f0000000b00)}) splice(r0, 0x0, r8, 0x0, 0x1e8640, 0x0) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x8002) ioctl$SNDRV_TIMER_IOCTL_GINFO(r10, 0x403c5404, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3, 0x99}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000200)={'raw\x00', 0xdc, "485d297ae0150081794fea96dae019a929bbe75e5748d4848318b772c90b9be77ba0bd3522a40394c1a5bcfc9b3a66adc2844b9fdac6e3d2da88e6428c34ece629cb080b54a5363a50e123b9ac6a4a435a41f20cc9c76caea5c206142e23c5fd0a80ee58020ea90eb98b6f7ce13d949ff9e716eb02667d34f0b954299f69e3218dd0ce8e33687ee1b2d1875b0c461b17780e68c83d532ac1eddd85eff59f1625eceb8982ebd6cab55f0c1f33c7a371d69ec44e8e6cca8ee788cb61789077c286c595b51e973c1ee0141a35287d67ccf1819a6063002e0a45f8f36841"}, &(0x7f0000000140)=0x100) sendmmsg$alg(r6, &(0x7f00000024c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="0516b09a08896634e1442d23d79a3f11b228d337b08dbbf90e9513032390312d34773b0ef20337eec6384e1c5137b483cb4d92ece91bf8f314adb8e75929e2043bb26b2b497dbbc31bfcb57fd4dbbb4ffa9d9dddf36ea9accf8621c5496ad3d718d2ef72c539025c59f3f4b6937c2b82411b5e463d35c40fa318b3773edab8fa62b4125e2f3dc71ee1c60b46e0e2b6c0e19d0791b4d23af57d27aae89cc65479ae93e053dfec0d3286fb5b0347e0ee36edbf7c4120c593a35e9885391e358590d4dc8c", 0xc3}, {&(0x7f0000000480)="30ead5c040d96d368e386faba66e98efd475fb66460350d2a8d2a90a75997ab8caf56a7a13241b384484a9502f3cd4c083f0a441830d48cf94896946d189012868d104fa17eef903de330ece42d6a815c13975c74ecc807814ccc1a646d20ac45e865f5067ec9375b7946b321dc866dbc07e67d122a9fb58c731ae5c7425b228e1178df8270618db34d9b73529ffab6aa128d40f8e18ff60f4b68b2a3ce2c974e410f13d60d473808577efb940338a", 0xaf}, {&(0x7f0000000540)="31b4e696845929dea88a58a61334966258b6c96b9e89c3beb70e99ee59ffe16d5df4447801c91c1e1dec97c2738ef0263875d660e3e2283123079c04d9c98a436eadd7e07c07a0c1609bd8a7e157762ae175f84a2c110cc4a24dfdf1", 0xfffffffffffffe58}, {&(0x7f0000000600)="22d79fa6853eee1e1d8b98f3e6bfa68bb7070076022e2fcbe5f9db6e04f2aa6d2873aa277335a95e01eca54307585b2feab287e2b7bb3d60c347060370812ffe8a5bfce0f2b75947534ce713b3ab357b020a041ee879b6fadfce01950537779f7814987ddd74e57d7c0e18da0f8fac19e4c9150698e09f5de738a65438e3e1209c6cdb7f44", 0x85}, {&(0x7f00000006c0)="3aef67d03289119f826d023366b23f72a7de5f62ec70856df2a604408365a4aeb9ee2bc83336c1623b9480d138ce39ddf52b3a7642c10b27ab0f109e2294808eff71232fe26c15c3fc6912741953bd1817bbbbc98a301c3bc0ac593a20cab7ba41031279613ddb25e43662636b5ca78ae2dcbee216dda567194295ec3625e50c6f78b4ac2c2e085267e8e2e58668f5afffba922aa7b8f99c08deb2e813c882", 0x9f}], 0x5, &(0x7f0000000780)=[@iv={0x60, 0x117, 0x2, 0x4d, "f100dcf423cead6f5324e04bc168e664cdecff8d8238c100ec41cd349fd46ef31fb119d44b9bd54d294691b7fff256aca37faa766950086eba2288a4e9449b0fbd026d0af227bc9816b96926cd"}, @assoc={0x10, 0x117, 0x4, 0x9d8b}, @assoc={0x10, 0x117, 0x4, 0x5}], 0x80, 0x8040}, {0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000800)="3493ad08323e78474b4a1449bbcfb3dec70b344e25316cb0ce0bcd420df1d4f81c3919eb0bf32e0ff640c90db72acc90966b8b52a060296aa323b4a43717b6fec95945349a22da4c", 0x48}, {&(0x7f0000000880)="0cf82a73794873a441f79e93ff142d2cfd0c2dada0502ea9fa444603d4b23857991cf9e8c48686326c3564f64a7408bfcf0c008ac0e9a4c37211a3062c1076b05c2d5be74f8513cdeb51549d36a91fd47eb513ccf6f1b3cd8015de08167c434ba1fbae2976f4e640e79910c8bc4316e0037b83ee12f90570829cc5af28a5d4f073f121143c47631d50f3d915522e36b277e053379e8508", 0x97}, {&(0x7f0000000940)="498eba2b2ae0b41a9af24274bb56cc1045ad0bfffd50460904de8cc83870cc317ab1855fd50d21767681d29087e0951ce5e9adc24e551968a4496ad9a6da35e32a69e450462066c0eb65ba76994731c61a82db28db09de13", 0x58}, {&(0x7f00000009c0)="ed7ea432a6d9430a8a3f9090237c6d169d0349ad05ccacebec8fab9a3f5eddb2ecef5203a3e40e186d07d3313e9093524e091dd4c2777cc537edcdd86a55c821a17bb26de3772602711f18d06e2f950b4fe815e6a1f3101bef0ce0c2d046afa4689ccf88b5dc85ba7269cc", 0x6b}, {&(0x7f0000000a40)="de84b032b7e0fa761be43c607aae04660bd100d6c3fec9b0ed6d235d5976efb2a8d31e687e252ec9f4b77b0dbcd359778a09eb461daf7a9a910eef3715655ff41bb947ff815cafa53a8e971f4daf6189ee1722c07cbeb27513990a8c8088070af11f5afcd7443b259a639e3320a9f7c3a0c7644887d2ebc888685839b7a622d65e6bf27e901ed1f3e86b515a39472259011f239c66858675ea9578e702560162b77f94b4acae61fb3a8ebdafd5145a9dc5a2aa4a0c7beb7d13f73601d96769f23da4be203d78341095dd243b4ae1221389af8c68f5", 0xd5}, {&(0x7f0000000b40)="86730500fb840336e55e8d2dcd53cd0ce1c92526c450e7252d5e64941daf097c401d598718d8ed44c0f7180cdec72748dc9ae89f67d95c66752eb25a2cfb26fd4bce1c94f997a7ec2a91573343f863c0fa6176e32d65767a739278e2da8fc834f5042e2b6aea2e40c70f1db9326f0418d13a2ec4b6ca782cea0c6d1480963bb8bcb6d1e2c0485d8b00e3fd62a816ce7a3157afeb8ffb0bf61dea24ca7e7409ea4d40378fa612cb0cffe72b81987aab001bb79f0bb098f95974e47374fee8685fad1396310e53e2159b75da7a6877cb3480e993c82d0b5be0ee7fb80481dd2813819a64cbd14b8bdb6f552a8adf2861d4", 0xf0}, {&(0x7f0000000c40)="8c1a410bb25c164b995620a39ef4e52444a10bcc88cdff48d399bb434bcbaf4e0fdf0ed40da2d3dc315f742c11176c08b6b6e7cc553ccb62ae42227cb5672dad04215737ca", 0x45}, {&(0x7f0000000cc0)="6b0f81ab356049a1bcd0a569efb8c437cf2fef72a2c382bcea6c63ec700ecc0d0aa0267089c26c818eb49b940b86c27a8ec87c83d850e4100eee3b30dde52facec41e74b89d344a4faf26ea056b09a3f24f47a0c579cf8174b91c5ae695c01b9c06072c6bbe855b408617faeb4ca3b52a3efad3efea2c84df46300895515eb2e483112153d0f0aefb570108c1513bce4f5d1ae8ea2ed4433e3e06fddd12cbd3656381becdecd8b76135035164cff487c8f49bc02c3761fcd8575c80f2ca3d39db15dcbf1e93d830ffc323d186a1e4f94dbb827148b0a453f5d8cc464cda7f19caf5920302ee1", 0xe6}, {&(0x7f0000000dc0)="66e1718c8d368788dfc170679fd51bdecb118492f7e6166f292ea08fac9e2e866b8b4a746fb6cd24e4449240128485ec9df2b9f29e442c2cf8f7e0f915c882b76e6f9ad1ce9bfadb5d6d325252e89245de", 0x51}], 0x9, &(0x7f0000000ec0)=[@iv={0x68, 0x117, 0x2, 0x57, "983ed2f8c4f6a96b29e7db7ff1d5fe3b8ab3692f2724bbe30bd44fd5168463f56b1f1b775825b88c10e238b1d9fab434fdb9c332c01d5e39e16ed8fa2146421e2d32b8e23302d0f4b8de9241506533a461b7352be6783e"}, @op={0x10}, @iv={0x90, 0x117, 0x2, 0x80, "d1648b0d664a59bf27f42c3efbdeb42a1fde6d07961e367d76060f5c2b33362412fb0453a65003adaf749740d50f13ce55362b09cb0ca1dd8fbf952c968c4e92c493c42086c19fa0774eb16ed9ff43816b04262454b118740cc45dc1c15f0b453b096608d5f10104a0ed2a57ecf4e82271f5978b03cb65f12a49c8773ea78bba"}, @assoc={0x10, 0x117, 0x4, 0x4}, @assoc={0x10, 0x117, 0x4, 0x8}, @assoc={0x10, 0x117, 0x4, 0x5}], 0x138, 0x20004000}, {0x0, 0x0, &(0x7f0000001080)=[{&(0x7f00000011c0)="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", 0x1000}, {&(0x7f0000001000)="8267a96c399e5dcdde518f3cf61d83da975d55df70e5fc7824cf5678a477911ab94d79df493988d82ce14c683be78a7d78a3e09350cdc982bbb850644a06d59e6c273156009ed913aebca39f742cd6178050f176dd030fad83b6cba283e0d5693f9b70", 0x63}], 0x2, &(0x7f00000021c0)=[@iv={0xcc, 0x117, 0x2, 0xb9, "d120e88df9f261aef8f91885d44e0d8b4cd7ea1ab32dd3422ce2e362380007f642084cc707041fccdcc7b005db844aa2ff905db6d1c2b4f4ad21a44860499b7cb8171353edafd42364e5dc4c5f0aac85fee9c3bc36eb1f2aed98fba802ad0f464ff52bbffedf41abdd17cd5936710a780e4a7315d3c9e371c739c4e904965d5461e80fa3d158290249f7d42da29edae1574174e99934719b86a5d1e55bb9085fc2075ba02d665e794e62b309c94940de8da55bc2019ce97371"}, @assoc={0x10, 0x117, 0x4, 0x6}], 0xdc, 0x8010}, {0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f00000022c0)="49db992371d5cff46d1acc0a3380d5ac8f51da952bf0bc945f75ed9a6f34bcb7d71ca1f9b485af6c9969abec1cc65629289fa930b33e145f082baff4674f32445ea0067285e672289c5baaaadb1387a5b38346bbd83b54c37665be96c323ef94a28de1a75f4fa9212f0c3a2d002946c1082a307ad92e2a801dcc3ceedc9634175594a753bc457c918bfcd10f6ad986c8e0ed25ad8f882de8d9e197cf4f44af7ea6e2752051557bc60c715237c3d08878dea29c60720377432b3ed03c51bcf8268d5e1a11ca14ddc3a45702bff4a84fb04022303e746782a38a55", 0xda}], 0x1, &(0x7f00000023c0)=[@assoc={0x10, 0x117, 0x4, 0x7fffffff}, @op={0x10}, @op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0x69}, @iv={0x30, 0x117, 0x2, 0x1e, "dc789104f6dd98b52132a49a538ab25ac1a7f6a7498ba042d6f40506edab"}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10}, @iv={0x54, 0x117, 0x2, 0x43, "db6e5a15a5faf388f17ccdf073000942fc363b26a0c478872be28cf023e5fc6d47996ccc37cce7beed2259b21ad34e8b6f64556f363ffe0b3c855b9915d2e5c719248e"}, @assoc={0x10, 0x117, 0x4, 0x5}], 0xf4, 0x80}], 0x4, 0x40) 25m57.857177021s ago: executing program 4 (id=1470): ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1000, 0x3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa080045000020002e00000011907800000000000000005c214e20000c9078a1040000"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x44f8, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x2f, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0}) getdents64(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10003, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 25m56.468827691s ago: executing program 4 (id=1473): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r2 = socket$igmp(0x2, 0x3, 0x2) (rerun: 64) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) (async, rerun: 64) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000040)=0x6, 0x4) (async, rerun: 64) recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0x8a}], 0x1, 0x20, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = gettid() ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)=0x0) kcmp(r3, r4, 0x0, r0, r1) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) getdents(0xffffffffffffffff, 0x0, 0x3b) (async, rerun: 64) r5 = io_uring_setup(0x1001148, &(0x7f0000000300)={0x0, 0xc95e, 0x800, 0x6, 0x30f}) (rerun: 64) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 25m55.976951387s ago: executing program 4 (id=1474): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, &(0x7f0000002900)={0x2020}, 0x2020) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r1, &(0x7f0000000100)=""/107, 0x6b) write$nci(r1, &(0x7f0000000000)=ANY=[], 0x4) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, r2, 0x0, 0x1, 0x0, 0x7}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000140)={0x7fffffffffffffff, 0x20, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@bridge_getneigh={0x28, 0x1e, 0x20, 0x70bd26, 0x25dfdc00, {0x7, 0x0, 0x0, 0x0, 0x10, 0x221}, [@IFLA_LINK={0x8, 0x5, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 25m55.557002953s ago: executing program 32 (id=1474): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, &(0x7f0000002900)={0x2020}, 0x2020) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r1, &(0x7f0000000100)=""/107, 0x6b) write$nci(r1, &(0x7f0000000000)=ANY=[], 0x4) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, r2, 0x0, 0x1, 0x0, 0x7}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000140)={0x7fffffffffffffff, 0x20, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@bridge_getneigh={0x28, 0x1e, 0x20, 0x70bd26, 0x25dfdc00, {0x7, 0x0, 0x0, 0x0, 0x10, 0x221}, [@IFLA_LINK={0x8, 0x5, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 22.109896492s ago: executing program 3 (id=6636): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)={0x58, r2, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x3c, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (fail_nth: 1) 21.829247677s ago: executing program 3 (id=6637): lstat64(&(0x7f0000000000)='./file0\x00', 0x0) openat$cuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="050025bd7000fbdbdf251c000000180001801400020069703667726574617030000000000000"], 0x2c}}, 0x40006) r5 = memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\x04\x00\x00\x00\x00\x00\x00\x00\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xb0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\x14\x16\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd75\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\xa2K\xa1\xb3\xce\x1e\x96{%\xa8\xc7\x93\xdb\x80v+o\xb8\xe8\x1b\x06\xfbwb\x11\xb7\x9fu\xf3\xd3\x7f\x04k\xa0B\xa5\xc9\xb1\xec\xb1\xf6\x11\xc1O\xecG\xe6q5\x97u\x0fl\x90\x9b\x9f\xaf\xfb\xdf\x12^\xc9\x92|\x11\"\xd7\xb5\xf0\xdc\\\f\xec\xfd\xa1\xfdVZ*\xeb\xde\x14\xe0\x8b\x1c\x820b\x89\xbd\xd7\x0e\x9b\xf2\xe9A\xfb\x89\xc6\x84\x14b\xd4\x7f\xdf.\x05\x00S\xf5\x19\xb4fE\x87\xd4E\xc8>\x8f\x05Bg\x15\xe1\x8c\x94ERT\xac\xb4\x00\x00\x00\x00\x00\x00\x00\xc4\x0f\xc1\x9e\xf6#f\x03\xb0\xe4\xb6\xf5\x04z+Pa\xbc\x12a7z\xad6\xf7\xeb\xa7\x88\"\xcf\xf6\xcfP\x12\a;h\x95\x90\x83\x06\xdf\xbd}.\xa6$2D\xf1T\xc9\x8aG\x12\xe51', 0x7) r6 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0185647, &(0x7f0000000100)={0xf030000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00901, 0x8000000, '\x00', @string=0x0}}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r5, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x0, 0x5002) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000300)={{@host, 0xd}, 0x1}) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000810) read$FUSE(r7, &(0x7f0000000240)={0x2020}, 0x2020) epoll_wait(r7, &(0x7f0000002280)=[{}, {}, {}], 0x3, 0x8) pread64(r7, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cbba25083b0904a10100010203010902120001000020000904"], 0x0) 18.046343157s ago: executing program 3 (id=6649): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) poll(&(0x7f0000000000)=[{r0, 0x806e}], 0x1, 0x9) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffbfffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setstatus(r3, 0x4, 0x7c00) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x98, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6af834f}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x44840}, 0xc0) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) unlinkat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x200) write$binfmt_script(r4, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '[\v\xdb\x06\x00\x00\x00\x00\x00\x00\x00\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x00\x00\x80\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xcc\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8cI\xdcn\x9b\xa5\xd4\x13\xc0\x82^\x10,\xfa\x88\x93\xc6K2\xf2\xce\x95\x1bG\xb2m\xad\xe7\xd1P.XT\xc1\xc5\xd9\xaf\v\x8d\xcf\x8f`{F\xc7\x95!\xcc\vq0\xd0\x80\x06{\x97\xb0\xdb+Z\xc5\x9d\xf4\x0eS\xd2\xd4\xb5\\\x96\x1dN\xe6\xfd\\\xe32_p\xee\x15JU\x11\x1f\xc6\xeb\xafm\x1e\xb3\xb5\xfe\x02\xe24\x90Uo\xaf\xce/\x9c\xd4\vE \x81\x14\xdf\x9b\x12b\x1a\x173\x8d\t\xab\xec\xf0n\xa5\x95\x9c\xc3\xf2\xb6CS\xf3\xa8p\t!\xb3\x912`\n\xd2\xe2S\x9cU\xcc\"\xf2d(Ec\xb2\x7f\x02'}]}, 0x130) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x3) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) recvmmsg(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4000880) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x102, 0x101, @private0, 0x3}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 16.621841519s ago: executing program 1 (id=6651): lstat64(&(0x7f0000000000)='./file0\x00', 0x0) openat$cuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="050025bd7000fbdbdf251c000000180001801400020069703667726574617030000000000000"], 0x2c}}, 0x40006) r3 = memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\x04\x00\x00\x00\x00\x00\x00\x00\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xb0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\x14\x16\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd75\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\xa2K\xa1\xb3\xce\x1e\x96{%\xa8\xc7\x93\xdb\x80v+o\xb8\xe8\x1b\x06\xfbwb\x11\xb7\x9fu\xf3\xd3\x7f\x04k\xa0B\xa5\xc9\xb1\xec\xb1\xf6\x11\xc1O\xecG\xe6q5\x97u\x0fl\x90\x9b\x9f\xaf\xfb\xdf\x12^\xc9\x92|\x11\"\xd7\xb5\xf0\xdc\\\f\xec\xfd\xa1\xfdVZ*\xeb\xde\x14\xe0\x8b\x1c\x820b\x89\xbd\xd7\x0e\x9b\xf2\xe9A\xfb\x89\xc6\x84\x14b\xd4\x7f\xdf.\x05\x00S\xf5\x19\xb4fE\x87\xd4E\xc8>\x8f\x05Bg\x15\xe1\x8c\x94ERT\xac\xb4\x00\x00\x00\x00\x00\x00\x00\xc4\x0f\xc1\x9e\xf6#f\x03\xb0\xe4\xb6\xf5\x04z+Pa\xbc\x12a7z\xad6\xf7\xeb\xa7\x88\"\xcf\xf6\xcfP\x12\a;h\x95\x90\x83\x06\xdf\xbd}.\xa6$2D\xf1T\xc9\x8aG\x12\xe51', 0x7) r4 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0185647, &(0x7f0000000100)={0xf030000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00901, 0x8000000, '\x00', @string=0x0}}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r3, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x0, 0x5002) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000300)={{@host, 0xd}, 0x1}) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r6, 0xe03, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000810) read$FUSE(r5, &(0x7f0000000240)={0x2020}, 0x2020) epoll_wait(r5, &(0x7f0000002280)=[{}, {}, {}], 0x3, 0x8) pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cbba25083b0904a10100010203010902120001000020000904"], 0x0) 15.481316614s ago: executing program 3 (id=6653): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00') r1 = getpid() r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000380)={0xfffc, 0x0, 0x3, 0xffff}, 0x8) sendto$inet6(r2, &(0x7f0000000080)='w', 0x1, 0x94, &(0x7f0000000000)={0xa, 0x4, 0x3, @private1, 0x8}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000040)=0x400, 0x4) r3 = syz_pidfd_open(r1, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r5 = openat$zero(0xffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$TUNSETVNETLE(r5, 0x400454dc, &(0x7f0000000200)) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) ioctl$FBIOPUTCMAP(r8, 0x4605, &(0x7f0000000440)={0xba75, 0x6, &(0x7f0000000340)=[0x9b, 0xffea, 0x5, 0x5204, 0x5, 0x6], &(0x7f0000000380)=[0x20, 0x3, 0xc, 0x1000, 0x7, 0x3, 0xdb], &(0x7f00000003c0)=[0x3, 0x0, 0x0, 0x101, 0x5, 0x5, 0xf], &(0x7f0000000400)=[0x1000]}) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'vlan1\x00'}) writev(r0, &(0x7f0000000000)=[{0x0, 0x2b}, {&(0x7f0000000280)='2', 0x1}], 0x2) openat$procfs(0xffffff9c, &(0x7f0000000480)='/proc/cpuinfo\x00', 0x0, 0x0) 14.735730485s ago: executing program 1 (id=6658): lstat64(&(0x7f0000000000)='./file0\x00', 0x0) openat$cuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="050025bd7000fbdbdf251c000000180001801400020069703667726574617030000000000000"], 0x2c}}, 0x40006) r5 = memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\x04\x00\x00\x00\x00\x00\x00\x00\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xb0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\x14\x16\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd75\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\xa2K\xa1\xb3\xce\x1e\x96{%\xa8\xc7\x93\xdb\x80v+o\xb8\xe8\x1b\x06\xfbwb\x11\xb7\x9fu\xf3\xd3\x7f\x04k\xa0B\xa5\xc9\xb1\xec\xb1\xf6\x11\xc1O\xecG\xe6q5\x97u\x0fl\x90\x9b\x9f\xaf\xfb\xdf\x12^\xc9\x92|\x11\"\xd7\xb5\xf0\xdc\\\f\xec\xfd\xa1\xfdVZ*\xeb\xde\x14\xe0\x8b\x1c\x820b\x89\xbd\xd7\x0e\x9b\xf2\xe9A\xfb\x89\xc6\x84\x14b\xd4\x7f\xdf.\x05\x00S\xf5\x19\xb4fE\x87\xd4E\xc8>\x8f\x05Bg\x15\xe1\x8c\x94ERT\xac\xb4\x00\x00\x00\x00\x00\x00\x00\xc4\x0f\xc1\x9e\xf6#f\x03\xb0\xe4\xb6\xf5\x04z+Pa\xbc\x12a7z\xad6\xf7\xeb\xa7\x88\"\xcf\xf6\xcfP\x12\a;h\x95\x90\x83\x06\xdf\xbd}.\xa6$2D\xf1T\xc9\x8aG\x12\xe51', 0x7) r6 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0185647, &(0x7f0000000100)={0xf030000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00901, 0x8000000, '\x00', @string=0x0}}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r5, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x0, 0x5002) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000300)={{@host, 0xd}, 0x1}) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000810) read$FUSE(r7, &(0x7f0000000240)={0x2020}, 0x2020) epoll_wait(r7, &(0x7f0000002280)=[{}, {}, {}], 0x3, 0x8) pread64(r7, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cbba25083b0904a10100010203010902120001000020000904"], 0x0) 14.099522531s ago: executing program 0 (id=6659): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000080), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xff}]}}}]}, 0x3c}}, 0x0) r3 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/hibernate_compression_threads', 0x60a02, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) sendfile(r4, r4, 0x0, 0x3) wait4(r3, 0x0, 0x0, &(0x7f0000001140)) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setattr(r3, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x2000000, 0x400003}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r6, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x7c) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc04f01f56bb6e284f5fab5c66", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x800) r9 = openat$fb0(0xffffff9c, &(0x7f0000000a00), 0x80, 0x0) ioctl$FBIOPUTCMAP(r9, 0x4605, &(0x7f0000000b40)={0x6, 0x6, &(0x7f0000001100)=[0x694b, 0x1, 0xffff, 0x6, 0x81, 0xffff], &(0x7f0000000a80), &(0x7f0000001100), &(0x7f0000000b00)}) splice(r0, 0x0, r8, 0x0, 0x1e8640, 0x0) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x8002) ioctl$SNDRV_TIMER_IOCTL_GINFO(r10, 0x403c5404, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3, 0x99}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000200)={'raw\x00', 0xdc, "485d297ae0150081794fea96dae019a929bbe75e5748d4848318b772c90b9be77ba0bd3522a40394c1a5bcfc9b3a66adc2844b9fdac6e3d2da88e6428c34ece629cb080b54a5363a50e123b9ac6a4a435a41f20cc9c76caea5c206142e23c5fd0a80ee58020ea90eb98b6f7ce13d949ff9e716eb02667d34f0b954299f69e3218dd0ce8e33687ee1b2d1875b0c461b17780e68c83d532ac1eddd85eff59f1625eceb8982ebd6cab55f0c1f33c7a371d69ec44e8e6cca8ee788cb61789077c286c595b51e973c1ee0141a35287d67ccf1819a6063002e0a45f8f36841"}, &(0x7f0000000140)=0x100) sendmmsg$alg(r6, &(0x7f00000024c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="0516b09a08896634e1442d23d79a3f11b228d337b08dbbf90e9513032390312d34773b0ef20337eec6384e1c5137b483cb4d92ece91bf8f314adb8e75929e2043bb26b2b497dbbc31bfcb57fd4dbbb4ffa9d9dddf36ea9accf8621c5496ad3d718d2ef72c539025c59f3f4b6937c2b82411b5e463d35c40fa318b3773edab8fa62b4125e2f3dc71ee1c60b46e0e2b6c0e19d0791b4d23af57d27aae89cc65479ae93e053dfec0d3286fb5b0347e0ee36edbf7c4120c593a35e9885391e358590d4dc8c", 0xc3}, {&(0x7f0000000480)="30ead5c040d96d368e386faba66e98efd475fb66460350d2a8d2a90a75997ab8caf56a7a13241b384484a9502f3cd4c083f0a441830d48cf94896946d189012868d104fa17eef903de330ece42d6a815c13975c74ecc807814ccc1a646d20ac45e865f5067ec9375b7946b321dc866dbc07e67d122a9fb58c731ae5c7425b228e1178df8270618db34d9b73529ffab6aa128d40f8e18ff60f4b68b2a3ce2c974e410f13d60d473808577efb940338a", 0xaf}, {&(0x7f0000000540)="31b4e696845929dea88a58a61334966258b6c96b9e89c3beb70e99ee59ffe16d5df4447801c91c1e1dec97c2738ef0263875d660e3e2283123079c04d9c98a436eadd7e07c07a0c1609bd8a7e157762ae175f84a2c110cc4a24dfdf1", 0x5c}, {&(0x7f0000000600)="22d79fa6853eee1e1d8b98f3e6bfa68bb7070076022e2fcbe5f9db6e04f2aa6d2873aa277335a95e01eca54307585b2feab287e2b7bb3d60c347060370812ffe8a5bfce0f2b75947534ce713b3ab357b020a041ee879b6fadfce01950537779f7814987ddd74e57d7c0e18da0f8fac19e4c9150698e09f5de738a65438e3e1209c6cdb7f44", 0x85}, {&(0x7f00000006c0)="3aef67d03289119f826d023366b23f72a7de5f62ec70856df2a604408365a4aeb9ee2bc83336c1623b9480d138ce39ddf52b3a7642c10b27ab0f109e2294808eff71232fe26c15c3fc6912741953bd1817bbbbc98a301c3bc0ac593a20cab7ba41031279613ddb25e43662636b5ca78ae2dcbee216dda567194295ec3625e50c6f78b4ac2c2e085267e8e2e58668f5afffba922aa7b8f99c08deb2e813c882", 0x9f}], 0x5, &(0x7f0000000780)=[@iv={0x60, 0x117, 0x2, 0x4d, "f100dcf423cead6f5324e04bc168e664cdecff8d8238c100ec41cd349fd46ef31fb119d44b9bd54d294691b7fff256aca37faa766950086eba2288a4e9449b0fbd026d0af227bc9816b96926cd"}, @assoc={0x10, 0x117, 0x4, 0x9d8b}, @assoc={0x10, 0x117, 0x4, 0x5}], 0x80, 0x8040}, {0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000800)="3493ad08323e78474b4a1449bbcfb3dec70b344e25316cb0ce0bcd420df1d4f81c3919eb0bf32e0ff640c90db72acc90966b8b52a060296aa323b4a43717b6fec95945349a22da4c", 0x48}, {&(0x7f0000000880)="0cf82a73794873a441f79e93ff142d2cfd0c2dada0502ea9fa444603d4b23857991cf9e8c48686326c3564f64a7408bfcf0c008ac0e9a4c37211a3062c1076b05c2d5be74f8513cdeb51549d36a91fd47eb513ccf6f1b3cd8015de08167c434ba1fbae2976f4e640e79910c8bc4316e0037b83ee12f90570829cc5af28a5d4f073f121143c47631d50f3d915522e36b277e053379e8508", 0x97}, {&(0x7f0000000940)="498eba2b2ae0b41a9af24274bb56cc1045ad0bfffd50460904de8cc83870cc317ab1855fd50d21767681d29087e0951ce5e9adc24e551968a4496ad9a6da35e32a69e450462066c0eb65ba76994731c61a82db28db09de13", 0x58}, {&(0x7f00000009c0)="ed7ea432a6d9430a8a3f9090237c6d169d0349ad05ccacebec8fab9a3f5eddb2ecef5203a3e40e186d07d3313e9093524e091dd4c2777cc537edcdd86a55c821a17bb26de3772602711f18d06e2f950b4fe815e6a1f3101bef0ce0c2d046afa4689ccf88b5dc85ba7269cc", 0x6b}, {&(0x7f0000000a40)="de84b032b7e0fa761be43c607aae04660bd100d6c3fec9b0ed6d235d5976efb2a8d31e687e252ec9f4b77b0dbcd359778a09eb461daf7a9a910eef3715655ff41bb947ff815cafa53a8e971f4daf6189ee1722c07cbeb27513990a8c8088070af11f5afcd7443b259a639e3320a9f7c3a0c7644887d2ebc888685839b7a622d65e6bf27e901ed1f3e86b515a39472259011f239c66858675ea9578e702560162b77f94b4acae61fb3a8ebdafd5145a9dc5a2aa4a0c7beb7d13f73601d96769f23da4be203d78341095dd243b4ae1221389af8c68f5", 0xd5}, {&(0x7f0000000b40)="86730500fb840336e55e8d2dcd53cd0ce1c92526c450e7252d5e64941daf097c401d598718d8ed44c0f7180cdec72748dc9ae89f67d95c66752eb25a2cfb26fd4bce1c94f997a7ec2a91573343f863c0fa6176e32d65767a739278e2da8fc834f5042e2b6aea2e40c70f1db9326f0418d13a2ec4b6ca782cea0c6d1480963bb8bcb6d1e2c0485d8b00e3fd62a816ce7a3157afeb8ffb0bf61dea24ca7e7409ea4d40378fa612cb0cffe72b81987aab001bb79f0bb098f95974e47374fee8685fad1396310e53e2159b75da7a6877cb3480e993c82d0b5be0ee7fb80481dd2813819a64cbd14b8bdb6f552a8adf2861d4", 0xf0}, {&(0x7f0000000c40)="8c1a410bb25c164b995620a39ef4e52444a10bcc88cdff48d399bb434bcbaf4e0fdf0ed40da2d3dc315f742c11176c08b6b6e7cc553ccb62ae42227cb5672dad04215737ca", 0x45}, {&(0x7f0000000cc0)="6b0f81ab356049a1bcd0a569efb8c437cf2fef72a2c382bcea6c63ec700ecc0d0aa0267089c26c818eb49b940b86c27a8ec87c83d850e4100eee3b30dde52facec41e74b89d344a4faf26ea056b09a3f24f47a0c579cf8174b91c5ae695c01b9c06072c6bbe855b408617faeb4ca3b52a3efad3efea2c84df46300895515eb2e483112153d0f0aefb570108c1513bce4f5d1ae8ea2ed4433e3e06fddd12cbd3656381becdecd8b76135035164cff487c8f49bc02c3761fcd8575c80f2ca3d39db15dcbf1e93d830ffc323d186a1e4f94dbb827148b0a453f5d8cc464cda7f19caf5920302ee1", 0xe6}, {&(0x7f0000000dc0)="66e1718c8d368788dfc170679fd51bdecb118492f7e6166f292ea08fac9e2e866b8b4a746fb6cd24e4449240128485ec9df2b9f29e442c2cf8f7e0f915c882b76e6f9ad1ce9bfadb5d6d325252e892", 0x4f}], 0x9, &(0x7f0000000ec0)=[@iv={0x68, 0x117, 0x2, 0x57, "983ed2f8c4f6a96b29e7db7ff1d5fe3b8ab3692f2724bbe30bd44fd5168463f56b1f1b775825b88c10e238b1d9fab434fdb9c332c01d5e39e16ed8fa2146421e2d32b8e23302d0f4b8de9241506533a461b7352be6783e"}, @op={0x10}, @iv={0x90, 0x117, 0x2, 0x80, "d1648b0d664a59bf27f42c3efbdeb42a1fde6d07961e367d76060f5c2b33362412fb0453a65003adaf749740d50f13ce55362b09cb0ca1dd8fbf952c968c4e92c493c42086c19fa0774eb16ed9ff43816b04262454b118740cc45dc1c15f0b453b096608d5f10104a0ed2a57ecf4e82271f5978b03cb65f12a49c8773ea78bba"}, @assoc={0x10, 0x117, 0x4, 0x4}, @assoc={0x10, 0x117, 0x4, 0x8}, @assoc={0x10, 0x117, 0x4, 0x5}], 0x138, 0x20004000}, {0x0, 0x0, &(0x7f0000001080)=[{&(0x7f00000011c0)="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", 0x1000}, {&(0x7f0000001000)="8267a96c399e5dcdde518f3cf61d83da975d55df70e5fc7824cf5678a477911ab94d79df493988d82ce14c683be78a7d78a3e09350cdc982bbb850644a06d59e6c273156009ed913aebca39f742cd6178050f176dd030fad83b6cba283e0d5693f9b70", 0x63}], 0x2, &(0x7f00000021c0)=[@iv={0xcc, 0x117, 0x2, 0xb9, "d120e88df9f261aef8f91885d44e0d8b4cd7ea1ab32dd3422ce2e362380007f642084cc707041fccdcc7b005db844aa2ff905db6d1c2b4f4ad21a44860499b7cb8171353edafd42364e5dc4c5f0aac85fee9c3bc36eb1f2aed98fba802ad0f464ff52bbffedf41abdd17cd5936710a780e4a7315d3c9e371c739c4e904965d5461e80fa3d158290249f7d42da29edae1574174e99934719b86a5d1e55bb9085fc2075ba02d665e794e62b309c94940de8da55bc2019ce97371"}, @assoc={0x10, 0x117, 0x4, 0x6}], 0xdc, 0x8010}, {0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f00000022c0)="49db992371d5cff46d1acc0a3380d5ac8f51da952bf0bc945f75ed9a6f34bcb7d71ca1f9b485af6c9969abec1cc65629289fa930b33e145f082baff4674f32445ea0067285e672289c5baaaadb1387a5b38346bbd83b54c37665be96c323ef94a28de1a75f4fa9212f0c3a2d002946c1082a307ad92e2a801dcc3ceedc9634175594a753bc457c918bfcd10f6ad986c8e0ed25ad8f882de8d9e197cf4f44af7ea6e2752051557bc60c715237c3d08878dea29c60720377432b3ed03c51bcf8268d5e1a11ca14ddc3a45702bff4a84fb04022303e746782a38a55", 0xda}], 0x1, &(0x7f00000023c0)=[@assoc={0x10, 0x117, 0x4, 0x7fffffff}, @op={0x10}, @op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0x69}, @iv={0x30, 0x117, 0x2, 0x1e, "dc789104f6dd98b52132a49a538ab25ac1a7f6a7498ba042d6f40506edab"}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10}, @iv={0x44, 0x117, 0x2, 0x33, "db6e5a15a5faf388f17ccdf073000942fc363b26a0c478872be28cf023e5fc6d47996ccc37cce7beed2259b21ad34e8b6f6455"}, @assoc={0x10, 0x117, 0x4, 0x5}], 0xe4, 0x80}], 0x4, 0x40) 13.933395104s ago: executing program 3 (id=6660): lstat64(&(0x7f0000000000)='./file0\x00', 0x0) openat$cuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="050025bd7000fbdbdf251c000000180001801400020069703667726574617030000000000000"], 0x2c}}, 0x40006) r5 = memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\x04\x00\x00\x00\x00\x00\x00\x00\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xb0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\x14\x16\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd75\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\xa2K\xa1\xb3\xce\x1e\x96{%\xa8\xc7\x93\xdb\x80v+o\xb8\xe8\x1b\x06\xfbwb\x11\xb7\x9fu\xf3\xd3\x7f\x04k\xa0B\xa5\xc9\xb1\xec\xb1\xf6\x11\xc1O\xecG\xe6q5\x97u\x0fl\x90\x9b\x9f\xaf\xfb\xdf\x12^\xc9\x92|\x11\"\xd7\xb5\xf0\xdc\\\f\xec\xfd\xa1\xfdVZ*\xeb\xde\x14\xe0\x8b\x1c\x820b\x89\xbd\xd7\x0e\x9b\xf2\xe9A\xfb\x89\xc6\x84\x14b\xd4\x7f\xdf.\x05\x00S\xf5\x19\xb4fE\x87\xd4E\xc8>\x8f\x05Bg\x15\xe1\x8c\x94ERT\xac\xb4\x00\x00\x00\x00\x00\x00\x00\xc4\x0f\xc1\x9e\xf6#f\x03\xb0\xe4\xb6\xf5\x04z+Pa\xbc\x12a7z\xad6\xf7\xeb\xa7\x88\"\xcf\xf6\xcfP\x12\a;h\x95\x90\x83\x06\xdf\xbd}.\xa6$2D\xf1T\xc9\x8aG\x12\xe51', 0x7) r6 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0185647, &(0x7f0000000100)={0xf030000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00901, 0x8000000, '\x00', @string=0x0}}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r5, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x0, 0x5002) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000300)={{@host, 0xd}, 0x1}) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000810) read$FUSE(r7, &(0x7f0000000240)={0x2020}, 0x2020) epoll_wait(r7, &(0x7f0000002280)=[{}, {}, {}], 0x3, 0x8) pread64(r7, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cbba25083b0904a10100010203010902120001000020000904"], 0x0) 13.390903568s ago: executing program 3 (id=6661): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x0, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x34565348, 0xb22], [0x7], 0x1}}, 0x8}) r4 = socket(0x1d, 0x2, 0x6) sendto(r4, &(0x7f00000001c0)="3de50079c9c0124035f49fa96a1f1e84a1a5a5d0914c6156956ccb55ac900caea0813004559e54ff2f9347f43eb7e53bd79c62d7cfb0881742df859cafe1e24bf52d5f56467d1b0817e3001a5b4f8850a337c69b943ae1ad9ff3b12ab1fedce27d9051f7b4a9728b5e1ae664a07a8f3fd6673132a2447aaa3d28cd5d6eb911d812b04123b0ed2c948ba882421ac1eddf7d", 0x91, 0x8080, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x4004000) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x6dc183) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41) syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x80000) r6 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000240)={0xc7, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80000008}, {}, {}, {0x0, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xee}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdab}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xf}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x5}, {0x80000001, 0x1}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4ba74dda}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}]}) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x102, 0x0) sendfile(r9, r9, 0x0, 0x6) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0xffffffffffffffc6, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000002000010000000000fcdbdf250a106b00000000031f00020014000200fc0200000000000000000000000057c7bd40e993d2556e000114000100070100"/76], 0x4c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 11.983491977s ago: executing program 33 (id=6661): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x0, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x34565348, 0xb22], [0x7], 0x1}}, 0x8}) r4 = socket(0x1d, 0x2, 0x6) sendto(r4, &(0x7f00000001c0)="3de50079c9c0124035f49fa96a1f1e84a1a5a5d0914c6156956ccb55ac900caea0813004559e54ff2f9347f43eb7e53bd79c62d7cfb0881742df859cafe1e24bf52d5f56467d1b0817e3001a5b4f8850a337c69b943ae1ad9ff3b12ab1fedce27d9051f7b4a9728b5e1ae664a07a8f3fd6673132a2447aaa3d28cd5d6eb911d812b04123b0ed2c948ba882421ac1eddf7d", 0x91, 0x8080, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x4004000) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x6dc183) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41) syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x80000) r6 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000240)={0xc7, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80000008}, {}, {}, {0x0, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xee}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdab}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xf}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x5}, {0x80000001, 0x1}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4ba74dda}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}]}) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x102, 0x0) sendfile(r9, r9, 0x0, 0x6) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0xffffffffffffffc6, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000002000010000000000fcdbdf250a106b00000000031f00020014000200fc0200000000000000000000000057c7bd40e993d2556e000114000100070100"/76], 0x4c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 11.96893772s ago: executing program 0 (id=6663): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031400e4ff020002004788aa96a13bb100001100117fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 11.434726534s ago: executing program 0 (id=6666): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket(0x1e, 0x4, 0x0) getsockname$packet(r3, &(0x7f0000000040), &(0x7f0000000080)=0x14) r4 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0cc5640, 0x0) socket(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0), 0x0, 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f00000006c0)={0x0, 0x9, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], &(0x7f0000000600), &(0x7f0000000640)=[0x6, 0xc, 0x1], 0x0, 0xfffffffffffffff8}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) syz_emit_ethernet(0xfdef, 0x0, 0x0) r9 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe6074bdf1dc41427cb05cdcc0a6bf308e382bd3b0a7", 0x3d}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) recvmmsg(r9, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/96, 0x7}, {&(0x7f0000000940)=""/53, 0x35}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) 11.344242621s ago: executing program 1 (id=6667): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) r3 = dup2(r2, r2) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r3, &(0x7f00000063c0)={0x2020}, 0x2020) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f00000001c0)={'nat\x00', 0xab, "008437fcdd5ca554079d2890c3c2fead86d443191ad13698b588020e18a8fd1913bb221b41a4af8c45fcdba680c29f2c7efed3ec03b36ed7c8c8b86ed8a7fffb2bbf44376849290cf8f4d1afeebc1a6fa0d530500689fe3538b59713ee094e782f40f8996317fdd8b789a3f07c3d48371afaf96d2f0a1cf1214096c269e1743f4b2522296289af91bac6e3063affaef662715101ebc43c7c3c931d4d3864530583b6ca8d5d662e595e191c"}, &(0x7f0000000040)=0xcf) sendto$packet(r0, &(0x7f0000000180)="10031400e4ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 10.36056572s ago: executing program 1 (id=6668): lstat64(&(0x7f0000000000)='./file0\x00', 0x0) openat$cuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="050025bd7000fbdbdf251c000000180001801400020069703667726574617030000000000000"], 0x2c}}, 0x40006) r4 = memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\x04\x00\x00\x00\x00\x00\x00\x00\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xb0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\x14\x16\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd75\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\xa2K\xa1\xb3\xce\x1e\x96{%\xa8\xc7\x93\xdb\x80v+o\xb8\xe8\x1b\x06\xfbwb\x11\xb7\x9fu\xf3\xd3\x7f\x04k\xa0B\xa5\xc9\xb1\xec\xb1\xf6\x11\xc1O\xecG\xe6q5\x97u\x0fl\x90\x9b\x9f\xaf\xfb\xdf\x12^\xc9\x92|\x11\"\xd7\xb5\xf0\xdc\\\f\xec\xfd\xa1\xfdVZ*\xeb\xde\x14\xe0\x8b\x1c\x820b\x89\xbd\xd7\x0e\x9b\xf2\xe9A\xfb\x89\xc6\x84\x14b\xd4\x7f\xdf.\x05\x00S\xf5\x19\xb4fE\x87\xd4E\xc8>\x8f\x05Bg\x15\xe1\x8c\x94ERT\xac\xb4\x00\x00\x00\x00\x00\x00\x00\xc4\x0f\xc1\x9e\xf6#f\x03\xb0\xe4\xb6\xf5\x04z+Pa\xbc\x12a7z\xad6\xf7\xeb\xa7\x88\"\xcf\xf6\xcfP\x12\a;h\x95\x90\x83\x06\xdf\xbd}.\xa6$2D\xf1T\xc9\x8aG\x12\xe51', 0x7) r5 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0185647, &(0x7f0000000100)={0xf030000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00901, 0x8000000, '\x00', @string=0x0}}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r4, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x0, 0x5002) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000300)={{@host, 0xd}, 0x1}) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r7, 0xe03, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000810) read$FUSE(r6, &(0x7f0000000240)={0x2020}, 0x2020) epoll_wait(r6, &(0x7f0000002280)=[{}, {}, {}], 0x3, 0x8) pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cbba25083b0904a10100010203010902120001000020000904"], 0x0) 10.337041859s ago: executing program 2 (id=6669): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0xed6, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_tables_targets\x00') read$FUSE(r1, &(0x7f0000002900)={0x2020}, 0xfffffffffffffef4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') io_setup(0x2, &(0x7f0000000040)) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) syz_open_dev$sndctrl(&(0x7f0000000100), 0x5de, 0x10000) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r3) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 9.922599487s ago: executing program 5 (id=6671): lstat64(&(0x7f0000000000)='./file0\x00', 0x0) openat$cuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="050025bd7000fbdbdf251c000000180001801400020069703667726574617030000000000000"], 0x2c}}, 0x40006) r5 = memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\x04\x00\x00\x00\x00\x00\x00\x00\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xb0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\x14\x16\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd75\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\xa2K\xa1\xb3\xce\x1e\x96{%\xa8\xc7\x93\xdb\x80v+o\xb8\xe8\x1b\x06\xfbwb\x11\xb7\x9fu\xf3\xd3\x7f\x04k\xa0B\xa5\xc9\xb1\xec\xb1\xf6\x11\xc1O\xecG\xe6q5\x97u\x0fl\x90\x9b\x9f\xaf\xfb\xdf\x12^\xc9\x92|\x11\"\xd7\xb5\xf0\xdc\\\f\xec\xfd\xa1\xfdVZ*\xeb\xde\x14\xe0\x8b\x1c\x820b\x89\xbd\xd7\x0e\x9b\xf2\xe9A\xfb\x89\xc6\x84\x14b\xd4\x7f\xdf.\x05\x00S\xf5\x19\xb4fE\x87\xd4E\xc8>\x8f\x05Bg\x15\xe1\x8c\x94ERT\xac\xb4\x00\x00\x00\x00\x00\x00\x00\xc4\x0f\xc1\x9e\xf6#f\x03\xb0\xe4\xb6\xf5\x04z+Pa\xbc\x12a7z\xad6\xf7\xeb\xa7\x88\"\xcf\xf6\xcfP\x12\a;h\x95\x90\x83\x06\xdf\xbd}.\xa6$2D\xf1T\xc9\x8aG\x12\xe51', 0x7) r6 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0185647, &(0x7f0000000100)={0xf030000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00901, 0x8000000, '\x00', @string=0x0}}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r5, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x0, 0x5002) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000300)={{@host, 0xd}, 0x1}) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000810) read$FUSE(r7, &(0x7f0000000240)={0x2020}, 0x2020) epoll_wait(r7, &(0x7f0000002280)=[{}, {}, {}], 0x3, 0x8) pread64(r7, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cbba25083b0904a10100010203010902120001000020000904"], 0x0) 9.058969267s ago: executing program 0 (id=6672): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00001ffc0020", 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe880000000000000000000000000201ff020000000000000000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r3 = add_key$user(0x0, &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122e", 0x3d, 0xfffffffffffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x5, 0x17, 0x0, 0x1, [@generic="b0"]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x97}, [@ldst={0x6, 0x2, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r5, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x14, &(0x7f0000000000)=0x109, 0x4) listen(r7, 0x2) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x3, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x7fff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x17}, 0x2000401c) socket$nl_route(0x10, 0x3, 0x0) recvmsg$kcm(r8, 0x0, 0x40) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r6, 0x3, {0x3, 0xff, 0x4}, 0xfd}, 0x18) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)='E', 0x1, 0x400c0d4, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 7.358121408s ago: executing program 0 (id=6673): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406da826c6000000000001090224000100000000090400000103000000092100000001220b000905810300"], 0x0) setpriority(0x0, 0x1, 0xa7a8) futex(&(0x7f000000cffc)=0x4, 0x80, 0x4, 0x0, &(0x7f0000000000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) futex(&(0x7f00000000c0)=0x1, 0x7, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000440)={{0xffbe, 0x5, 0x2, 0x5}, 'syz1\x00', 0x53}) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x2) ioctl$UI_DEV_CREATE(r4, 0x5501) ppoll(&(0x7f0000000300)=[{r4}], 0x1, 0x0, 0x0, 0x0) write$uinput_user_dev(r3, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x800, 0xe9a2, 0x1, 0x0, 0xa9ba, 0x2, 0x1, 0x7f5b, 0x3, 0x6, 0x2, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffff9, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000201, 0x0, 0xfffffffd, 0x4, 0x4, 0xa, 0xa, 0x1, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x9550, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x800, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x3ff, 0x1, 0x4, 0x8, 0x1, 0x7, 0x9, 0x6, 0x4, 0x5, 0xffffffff, 0x3, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x9, 0x7c83, 0xd, 0x1, 0x2, 0xf, 0x3, 0x47, 0x7, 0x0, 0x11, 0x3, 0xdfd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c, 0x2], [0x81, 0x3, 0x10, 0x4e26, 0x2, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc29, 0x9, 0x5, 0x5, 0x8000000a, 0x79a, 0x40, 0x40009, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1003, 0x10, 0xd, 0x6, 0x8000, 0x3ff, 0xf, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x100007, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0xa100, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f00000001c0)=[{{&(0x7f0000000140)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0xc}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @local, @local}}}], 0x24}}], 0x1, 0x44008010) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r7, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x6d47}], 0x1}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x22, 0xb, {[@main=@item_4={0x3, 0x0, 0xa, "9e7e3f94"}, @local=@item_4={0x3, 0x2, 0x0, "0500"}, @global=@item_012={0x0, 0x1, 0x3}]}}, 0x0}, 0x0) 7.053590113s ago: executing program 2 (id=6674): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000080), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xff}]}}}]}, 0x3c}}, 0x0) r3 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/hibernate_compression_threads', 0x60a02, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) sendfile(r4, r4, 0x0, 0x3) wait4(r3, 0x0, 0x0, &(0x7f0000001140)) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setattr(r3, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x2000000, 0x400003}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r6, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x7c) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc04f01f56bb6e284f5fab5c66", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x800) r9 = openat$fb0(0xffffff9c, &(0x7f0000000a00), 0x80, 0x0) ioctl$FBIOPUTCMAP(r9, 0x4605, &(0x7f0000000b40)={0x6, 0x6, &(0x7f0000001100)=[0x694b, 0x1, 0xffff, 0x6, 0x81, 0xffff], &(0x7f0000000a80), &(0x7f0000001100), &(0x7f0000000b00)}) splice(r0, 0x0, r8, 0x0, 0x1e8640, 0x0) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x8002) ioctl$SNDRV_TIMER_IOCTL_GINFO(r10, 0x403c5404, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3, 0x99}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000200)={'raw\x00', 0xdc, "485d297ae0150081794fea96dae019a929bbe75e5748d4848318b772c90b9be77ba0bd3522a40394c1a5bcfc9b3a66adc2844b9fdac6e3d2da88e6428c34ece629cb080b54a5363a50e123b9ac6a4a435a41f20cc9c76caea5c206142e23c5fd0a80ee58020ea90eb98b6f7ce13d949ff9e716eb02667d34f0b954299f69e3218dd0ce8e33687ee1b2d1875b0c461b17780e68c83d532ac1eddd85eff59f1625eceb8982ebd6cab55f0c1f33c7a371d69ec44e8e6cca8ee788cb61789077c286c595b51e973c1ee0141a35287d67ccf1819a6063002e0a45f8f36841"}, &(0x7f0000000140)=0x100) sendmmsg$alg(r6, &(0x7f00000024c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="0516b09a08896634e1442d23d79a3f11b228d337b08dbbf90e9513032390312d34773b0ef20337eec6384e1c5137b483cb4d92ece91bf8f314adb8e75929e2043bb26b2b497dbbc31bfcb57fd4dbbb4ffa9d9dddf36ea9accf8621c5496ad3d718d2ef72c539025c59f3f4b6937c2b82411b5e463d35c40fa318b3773edab8fa62b4125e2f3dc71ee1c60b46e0e2b6c0e19d0791b4d23af57d27aae89cc65479ae93e053dfec0d3286fb5b0347e0ee36edbf7c4120c593a35e9885391e358590d4dc8c", 0xc3}, {&(0x7f0000000480)="30ead5c040d96d368e386faba66e98efd475fb66460350d2a8d2a90a75997ab8caf56a7a13241b384484a9502f3cd4c083f0a441830d48cf94896946d189012868d104fa17eef903de330ece42d6a815c13975c74ecc807814ccc1a646d20ac45e865f5067ec9375b7946b321dc866dbc07e67d122a9fb58c731ae5c7425b228e1178df8270618db34d9b73529ffab6aa128d40f8e18ff60f4b68b2a3ce2c974e410f13d60d473808577efb940338a", 0xaf}, {&(0x7f0000000540)="31b4e696845929dea88a58a61334966258b6c96b9e89c3beb70e99ee59ffe16d5df4447801c91c1e1dec97c2738ef0263875d660e3e2283123079c04d9c98a436eadd7e07c07a0c1609bd8a7e157762ae175f84a2c110cc4a24dfdf1", 0x5c}, {&(0x7f0000000600)="22d79fa6853eee1e1d8b98f3e6bfa68bb7070076022e2fcbe5f9db6e04f2aa6d2873aa277335a95e01eca54307585b2feab287e2b7bb3d60c347060370812ffe8a5bfce0f2b75947534ce713b3ab357b020a041ee879b6fadfce01950537779f7814987ddd74e57d7c0e18da0f8fac19e4c9150698e09f5de738a65438e3e1209c6cdb7f44", 0x85}, {&(0x7f00000006c0)="3aef67d03289119f826d023366b23f72a7de5f62ec70856df2a604408365a4aeb9ee2bc83336c1623b9480d138ce39ddf52b3a7642c10b27ab0f109e2294808eff71232fe26c15c3fc6912741953bd1817bbbbc98a301c3bc0ac593a20cab7ba41031279613ddb25e43662636b5ca78ae2dcbee216dda567194295ec3625e50c6f78b4ac2c2e085267e8e2e58668f5afffba922aa7b8f99c08deb2e813c882", 0x9f}], 0x5, &(0x7f0000000780)=[@iv={0x60, 0x117, 0x2, 0x4d, "f100dcf423cead6f5324e04bc168e664cdecff8d8238c100ec41cd349fd46ef31fb119d44b9bd54d294691b7fff256aca37faa766950086eba2288a4e9449b0fbd026d0af227bc9816b96926cd"}, @assoc={0x10, 0x117, 0x4, 0x9d8b}, @assoc={0x10, 0x117, 0x4, 0x5}], 0x80, 0x8040}, {0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000800)="3493ad08323e78474b4a1449bbcfb3dec70b344e25316cb0ce0bcd420df1d4f81c3919eb0bf32e0ff640c90db72acc90966b8b52a060296aa323b4a43717b6fec95945349a22da4c", 0x48}, {&(0x7f0000000880)="0cf82a73794873a441f79e93ff142d2cfd0c2dada0502ea9fa444603d4b23857991cf9e8c48686326c3564f64a7408bfcf0c008ac0e9a4c37211a3062c1076b05c2d5be74f8513cdeb51549d36a91fd47eb513ccf6f1b3cd8015de08167c434ba1fbae2976f4e640e79910c8bc4316e0037b83ee12f90570829cc5af28a5d4f073f121143c47631d50f3d915522e36b277e053379e8508", 0x97}, {&(0x7f0000000940)="498eba2b2ae0b41a9af24274bb56cc1045ad0bfffd50460904de8cc83870cc317ab1855fd50d21767681d29087e0951ce5e9adc24e551968a4496ad9a6da35e32a69e450462066c0eb65ba76994731c61a82db28db09de13", 0x58}, {&(0x7f00000009c0)="ed7ea432a6d9430a8a3f9090237c6d169d0349ad05ccacebec8fab9a3f5eddb2ecef5203a3e40e186d07d3313e9093524e091dd4c2777cc537edcdd86a55c821a17bb26de3772602711f18d06e2f950b4fe815e6a1f3101bef0ce0c2d046afa4689ccf88b5dc85ba7269cc", 0x6b}, {&(0x7f0000000a40)="de84b032b7e0fa761be43c607aae04660bd100d6c3fec9b0ed6d235d5976efb2a8d31e687e252ec9f4b77b0dbcd359778a09eb461daf7a9a910eef3715655ff41bb947ff815cafa53a8e971f4daf6189ee1722c07cbeb27513990a8c8088070af11f5afcd7443b259a639e3320a9f7c3a0c7644887d2ebc888685839b7a622d65e6bf27e901ed1f3e86b515a39472259011f239c66858675ea9578e702560162b77f94b4acae61fb3a8ebdafd5145a9dc5a2aa4a0c7beb7d13f73601d96769f23da4be203d78341095dd243b4ae1221389af8c68f5", 0xd5}, {&(0x7f0000000b40)="86730500fb840336e55e8d2dcd53cd0ce1c92526c450e7252d5e64941daf097c401d598718d8ed44c0f7180cdec72748dc9ae89f67d95c66752eb25a2cfb26fd4bce1c94f997a7ec2a91573343f863c0fa6176e32d65767a739278e2da8fc834f5042e2b6aea2e40c70f1db9326f0418d13a2ec4b6ca782cea0c6d1480963bb8bcb6d1e2c0485d8b00e3fd62a816ce7a3157afeb8ffb0bf61dea24ca7e7409ea4d40378fa612cb0cffe72b81987aab001bb79f0bb098f95974e47374fee8685fad1396310e53e2159b75da7a6877cb3480e993c82d0b5be0ee7fb80481dd2813819a64cbd14b8bdb6f552a8adf2861d4", 0xf0}, {&(0x7f0000000c40)="8c1a410bb25c164b995620a39ef4e52444a10bcc88cdff48d399bb434bcbaf4e0fdf0ed40da2d3dc315f742c11176c08b6b6e7cc553ccb62ae42227cb5672dad04215737ca", 0x45}, {&(0x7f0000000cc0)="6b0f81ab356049a1bcd0a569efb8c437cf2fef72a2c382bcea6c63ec700ecc0d0aa0267089c26c818eb49b940b86c27a8ec87c83d850e4100eee3b30dde52facec41e74b89d344a4faf26ea056b09a3f24f47a0c579cf8174b91c5ae695c01b9c06072c6bbe855b408617faeb4ca3b52a3efad3efea2c84df46300895515eb2e483112153d0f0aefb570108c1513bce4f5d1ae8ea2ed4433e3e06fddd12cbd3656381becdecd8b76135035164cff487c8f49bc02c3761fcd8575c80f2ca3d39db15dcbf1e93d830ffc323d186a1e4f94dbb827148b0a453f5d8cc464cda7f19caf5920302ee1", 0xe6}, {&(0x7f0000000dc0)="66e1718c8d368788dfc170679fd51bdecb118492f7e6166f292ea08fac9e2e866b8b4a746fb6cd24e4449240128485ec9df2b9f29e442c2cf8f7e0f915c882b76e6f9ad1ce9bfadb5d6d325252e892", 0x4f}], 0x9, &(0x7f0000000ec0)=[@iv={0x68, 0x117, 0x2, 0x57, "983ed2f8c4f6a96b29e7db7ff1d5fe3b8ab3692f2724bbe30bd44fd5168463f56b1f1b775825b88c10e238b1d9fab434fdb9c332c01d5e39e16ed8fa2146421e2d32b8e23302d0f4b8de9241506533a461b7352be6783e"}, @op={0x10}, @iv={0x90, 0x117, 0x2, 0x80, "d1648b0d664a59bf27f42c3efbdeb42a1fde6d07961e367d76060f5c2b33362412fb0453a65003adaf749740d50f13ce55362b09cb0ca1dd8fbf952c968c4e92c493c42086c19fa0774eb16ed9ff43816b04262454b118740cc45dc1c15f0b453b096608d5f10104a0ed2a57ecf4e82271f5978b03cb65f12a49c8773ea78bba"}, @assoc={0x10, 0x117, 0x4, 0x4}, @assoc={0x10, 0x117, 0x4, 0x8}, @assoc={0x10, 0x117, 0x4, 0x5}], 0x138, 0x20004000}, {0x0, 0x0, &(0x7f0000001080)=[{&(0x7f00000011c0)="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", 0x1000}, {&(0x7f0000001000)="8267a96c399e5dcdde518f3cf61d83da975d55df70e5fc7824cf5678a477911ab94d79df493988d82ce14c683be78a7d78a3e09350cdc982bbb850644a06d59e6c273156009ed913aebca39f742cd6178050f176dd030fad83b6cba283e0d5693f9b70", 0x63}], 0x2, &(0x7f00000021c0)=[@iv={0xcc, 0x117, 0x2, 0xb9, "d120e88df9f261aef8f91885d44e0d8b4cd7ea1ab32dd3422ce2e362380007f642084cc707041fccdcc7b005db844aa2ff905db6d1c2b4f4ad21a44860499b7cb8171353edafd42364e5dc4c5f0aac85fee9c3bc36eb1f2aed98fba802ad0f464ff52bbffedf41abdd17cd5936710a780e4a7315d3c9e371c739c4e904965d5461e80fa3d158290249f7d42da29edae1574174e99934719b86a5d1e55bb9085fc2075ba02d665e794e62b309c94940de8da55bc2019ce97371"}, @assoc={0x10, 0x117, 0x4, 0x6}], 0xdc, 0x8010}, {0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f00000022c0)="49db992371d5cff46d1acc0a3380d5ac8f51da952bf0bc945f75ed9a6f34bcb7d71ca1f9b485af6c9969abec1cc65629289fa930b33e145f082baff4674f32445ea0067285e672289c5baaaadb1387a5b38346bbd83b54c37665be96c323ef94a28de1a75f4fa9212f0c3a2d002946c1082a307ad92e2a801dcc3ceedc9634175594a753bc457c918bfcd10f6ad986c8e0ed25ad8f882de8d9e197cf4f44af7ea6e2752051557bc60c715237c3d08878dea29c60720377432b3ed03c51bcf8268d5e1a11ca14ddc3a45702bff4a84fb04022303e746782a38a55", 0xda}], 0x1, &(0x7f00000023c0)=[@assoc={0x10, 0x117, 0x4, 0x7fffffff}, @op={0x10}, @op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0x69}, @iv={0x30, 0x117, 0x2, 0x1e, "dc789104f6dd98b52132a49a538ab25ac1a7f6a7498ba042d6f40506edab"}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10}, @iv={0x44, 0x117, 0x2, 0x33, "db6e5a15a5faf388f17ccdf073000942fc363b26a0c478872be28cf023e5fc6d47996ccc37cce7beed2259b21ad34e8b6f6455"}, @assoc={0x10, 0x117, 0x4, 0x5}], 0xe4, 0x80}], 0x4, 0x40) 6.976187532s ago: executing program 1 (id=6675): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x0) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000300), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000340), 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1ec, 0x0, 0x11, 0x148, 0x90, 0x0, 0x184, 0x2a8, 0x2a8, 0x90, 0x2a8, 0x3, 0x0, {[{{@ip={@remote, @rand_addr=0x64010100, 0xff, 0xff000000, 'veth1_to_bond\x00', 'wlan0\x00', {}, {}, 0x88, 0x2}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x4, 0x4, 0x121a5bb6, 0x1}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0xe}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x248) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x4, 0xa}, {}, {0xf, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8858}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x3}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xd8, 0x7ff, 0x2, 0x9, 0x6, 0x20000002, 0xfffffff9, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) syz_usb_connect(0x5, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0xd2, 0xcf, 0xa0, 0x8, 0x1163, 0x100, 0xdcba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x5, 0x5, 0x90, 0x1, [{{0x9, 0x4, 0xd7, 0x3, 0x2, 0xff, 0x3, 0x4, 0x4, [], [{{0x9, 0x5, 0xf, 0xede9da985a30f683, 0x200, 0x9, 0xb3, 0x5}}, {{0x9, 0x5, 0x85, 0x3, 0x10, 0x8, 0x8, 0xae}}]}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 6.633350666s ago: executing program 5 (id=6676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) socket(0xa, 0x5, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x1, 0x7fc00100}]}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000240)) epoll_create(0x1) syz_open_dev$vbi(0x0, 0x2, 0x2) r3 = syz_open_procfs(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = syz_io_uring_setup(0x8ad, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000100)={0xc, 0x10, 0xfffff014, 0x22a, 0x1ff, 0x5}) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) socket$igmp6(0xa, 0x3, 0x2) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000001c0)={r2}) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7", 0x85, 0x0, 0x0, 0x0) 5.956060213s ago: executing program 2 (id=6677): unshare(0xe060400) r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f00000004c0)=0x79, 0x4) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(khazad)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r5) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r3, 0xc0245720, &(0x7f0000000080)={0x1}) 5.658039884s ago: executing program 5 (id=6678): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000018c0)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r0, @ANYBLOB="a18300050000000000200500000008000300", @ANYRES8=r0, @ANYBLOB="c0"], 0xdc}}, 0x0) (async) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x5, 0x8]}, 0x8) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000008}, 0x4000040) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x158, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x7}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x50bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xfffffffffffff800, 0x81, 0x9, 0x100}}]}, 0x158}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2, {0x7, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0x5}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x800) 5.029087544s ago: executing program 2 (id=6679): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x806) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSETSW2(r3, 0x5425, 0x0) r4 = syz_io_uring_setup(0x1862, &(0x7f00000000c0)={0x0, 0x1241, 0x800, 0x0, 0x22b}, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x47f6, 0x1000, 0x2, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x1) 4.197786625s ago: executing program 0 (id=6680): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0xa, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000c80)='./file0\x00') unshare(0x6a040000) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c84ded552183692ecaa256eec051dcd726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404", @ANYBLOB="06"], 0x0) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x18014) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r6}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, 0x0) write$uinput_user_dev(r4, &(0x7f0000000980)={'syz0\x00', {}, 0x22, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3fffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0xfffffffc, 0x800, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x55f8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x2, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r4, 0x8040552c, &(0x7f0000006480)) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) 3.722484687s ago: executing program 2 (id=6681): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket(0x1d, 0x2, 0x6) sendto(r4, &(0x7f00000001c0)="3de50079c9c0124035f49fa96a1f1e84a1a5a5d0914c6156956ccb55ac900caea0813004559e54ff2f9347f43eb7e53bd79c62d7cfb0881742df859cafe1e24bf52d5f56467d1b0817e3001a5b4f8850a337c69b943ae1ad9ff3b12ab1fedce27d9051f7b4a9728b5e1ae664a07a8f3fd6673132a2447aaa3d28cd5d6eb911d812b04123b0ed2c948ba882421ac1eddf7d", 0x91, 0x8080, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x4004000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x103000, 0x0) ioctl$TIOCSPGRP(r6, 0x5410, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x6dc183) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41) syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x80000) r7 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000240)={0xc3, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xee}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdab}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xf}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x5}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4ba74dda}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}]}) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x102, 0x0) sendfile(r10, r10, 0x0, 0x6) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0xffffffffffffffc6, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000002000010000000000fcdbdf250a106b00000000031f00020014000200fc0200000000000000000000000057c7bd40e993d2556e000114000100070100"/76], 0x4c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 2.853327178s ago: executing program 5 (id=6682): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card3/oss_mixer\x00', 0x78000, 0x0) close(r0) 2.724297108s ago: executing program 5 (id=6683): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x15, &(0x7f0000000040), 0x10) getsockopt$sock_timeval(r4, 0x1, 0x43, 0x0, &(0x7f0000000040)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r6 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x6bf6, 0x100, 0x5, 0x12}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, &(0x7f00000003c0)={0x7, 0x8, 0x1}) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$dlm_monitor(0xffffff9c, &(0x7f0000000100), 0x400840, 0x0) getsockopt$bt_hci(r5, 0x84, 0x7d, &(0x7f0000002100)=""/4120, &(0x7f0000000000)=0x1018) 2.458716588s ago: executing program 1 (id=6684): lstat64(&(0x7f0000000000)='./file0\x00', 0x0) openat$cuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="050025bd7000fbdbdf251c000000180001801400020069703667726574617030000000000000"], 0x2c}}, 0x40006) r4 = memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\x04\x00\x00\x00\x00\x00\x00\x00\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xb0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\x14\x16\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd75\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\xa2K\xa1\xb3\xce\x1e\x96{%\xa8\xc7\x93\xdb\x80v+o\xb8\xe8\x1b\x06\xfbwb\x11\xb7\x9fu\xf3\xd3\x7f\x04k\xa0B\xa5\xc9\xb1\xec\xb1\xf6\x11\xc1O\xecG\xe6q5\x97u\x0fl\x90\x9b\x9f\xaf\xfb\xdf\x12^\xc9\x92|\x11\"\xd7\xb5\xf0\xdc\\\f\xec\xfd\xa1\xfdVZ*\xeb\xde\x14\xe0\x8b\x1c\x820b\x89\xbd\xd7\x0e\x9b\xf2\xe9A\xfb\x89\xc6\x84\x14b\xd4\x7f\xdf.\x05\x00S\xf5\x19\xb4fE\x87\xd4E\xc8>\x8f\x05Bg\x15\xe1\x8c\x94ERT\xac\xb4\x00\x00\x00\x00\x00\x00\x00\xc4\x0f\xc1\x9e\xf6#f\x03\xb0\xe4\xb6\xf5\x04z+Pa\xbc\x12a7z\xad6\xf7\xeb\xa7\x88\"\xcf\xf6\xcfP\x12\a;h\x95\x90\x83\x06\xdf\xbd}.\xa6$2D\xf1T\xc9\x8aG\x12\xe51', 0x7) r5 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0185647, &(0x7f0000000100)={0xf030000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00901, 0x8000000, '\x00', @string=0x0}}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r4, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x0, 0x5002) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000300)={{@host, 0xd}, 0x1}) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r7, 0xe03, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000810) read$FUSE(r6, &(0x7f0000000240)={0x2020}, 0x2020) epoll_wait(r6, &(0x7f0000002280)=[{}, {}, {}], 0x3, 0x8) pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cbba25083b0904a10100010203010902120001000020000904"], 0x0) 661.016818ms ago: executing program 5 (id=6685): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x80, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x7, 0xcc, 0x8, 0x100000000, 0x7}}]}}}]}, 0x80}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="c288a8", 0x3, 0x30, &(0x7f0000000440)={0x11, 0x18, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) r7 = socket$kcm(0xa, 0x2, 0x106) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x10c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r9 = socket(0x200000000000011, 0x2, 0x0) sendmmsg(r9, &(0x7f00000022c0)=[{{&(0x7f00000001c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="340000000301"], 0x34}}], 0x1, 0x4080) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0) 0s ago: executing program 2 (id=6686): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000002240)="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", 0xb62, 0x4004085, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r2, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback={0xffffffffffffffe4}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @broadcast}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000440)=0xfffffffa, 0x4) r3 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x18) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendfile(r5, r4, 0x0, 0x7ffff088) kernel console output (not intermixed with test programs): 51] bridge_slave_0: entered promiscuous mode [ 1841.460608][T28351] bridge0: port 2(bridge_slave_1) entered blocking state [ 1841.468426][T28351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1841.476047][T28351] bridge_slave_1: entered allmulticast mode [ 1841.485700][T28351] bridge_slave_1: entered promiscuous mode [ 1841.533298][T28351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1841.545511][T28351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1841.641631][T28351] team0: Port device team_slave_0 added [ 1841.656047][ T5910] usb 2-1: USB disconnect, device number 2 [ 1841.695257][T28351] team0: Port device team_slave_1 added [ 1841.766255][T28370] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6109'. [ 1841.799319][T28370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6109'. [ 1841.829496][T28370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6109'. [ 1841.838879][T28351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1841.845844][T28351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1841.973045][T28351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1842.035014][T28351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1842.045502][T28351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1842.073734][T28351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1842.161689][T28351] hsr_slave_0: entered promiscuous mode [ 1842.175780][T28351] hsr_slave_1: entered promiscuous mode [ 1842.193372][T28351] debugfs: 'hsr0' already exists in 'hsr' [ 1842.200751][T28351] Cannot create hsr debugfs directory [ 1842.716100][ T9702] usb 3-1: USB disconnect, device number 124 [ 1842.818323][ T5148] Bluetooth: hci5: command tx timeout [ 1842.984810][T28382] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6112'. [ 1844.032510][T28351] bond0: (slave netdevsim0): Releasing backup interface [ 1844.363363][T28398] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6115'. [ 1844.404816][T28397] tipc: Started in network mode [ 1844.413861][T28397] tipc: Node identity ca0a66c162ca, cluster identity 4711 [ 1844.428594][T28397] tipc: Enabled bearer , priority 0 [ 1844.453418][T28397] syzkaller0: entered promiscuous mode [ 1844.488807][T28397] syzkaller0: entered allmulticast mode [ 1844.596759][T28396] tipc: Resetting bearer [ 1844.639481][T28396] tipc: Disabling bearer [ 1844.748141][ T9702] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1844.883613][T28351] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1844.904077][ T5148] Bluetooth: hci5: command tx timeout [ 1844.928707][ T9702] usb 6-1: device descriptor read/64, error -71 [ 1844.957624][T28351] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1844.999748][T28351] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1845.049947][T28351] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1845.168084][ T9702] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1845.330694][ T9702] usb 6-1: device descriptor read/64, error -71 [ 1845.474975][ T9702] usb usb6-port1: attempt power cycle [ 1845.537764][T28351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1845.806093][T28351] 8021q: adding VLAN 0 to HW filter on device team0 [ 1845.871052][ T9702] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1845.886529][T17032] bridge0: port 1(bridge_slave_0) entered blocking state [ 1845.893758][T17032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1845.944532][ T9702] usb 6-1: device descriptor read/8, error -71 [ 1845.955322][T17032] bridge0: port 2(bridge_slave_1) entered blocking state [ 1845.962579][T17032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1846.009400][T28424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6121'. [ 1846.164331][T28351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1846.218103][ T9702] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1846.256801][ T9702] usb 6-1: device descriptor read/8, error -71 [ 1846.341026][T28351] veth0_vlan: entered promiscuous mode [ 1846.386136][ T9702] usb usb6-port1: unable to enumerate USB device [ 1846.395372][T28351] veth1_vlan: entered promiscuous mode [ 1846.402025][T26445] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 1846.544812][T28339] syz_tun (unregistering): left allmulticast mode [ 1846.560840][T26445] usb 2-1: config 0 has an invalid interface number: 46 but max is 0 [ 1846.583898][T26445] usb 2-1: config 0 has no interface number 0 [ 1846.595459][T28351] veth0_macvtap: entered promiscuous mode [ 1846.604937][T26445] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1846.618631][T26445] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.626846][T26445] usb 2-1: Product: syz [ 1846.631557][T26445] usb 2-1: Manufacturer: syz [ 1846.636318][T26445] usb 2-1: SerialNumber: syz [ 1846.644708][T28351] veth1_macvtap: entered promiscuous mode [ 1846.654092][T26445] usb 2-1: config 0 descriptor?? [ 1846.670664][T26445] ums-karma 2-1:0.46: USB Mass Storage device detected [ 1846.686804][T28351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1846.711718][T28351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1846.745858][ T80] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1846.764306][ T80] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1846.775677][ T80] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1846.786924][ T80] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1846.874550][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1846.901448][ T5836] usb 2-1: USB disconnect, device number 3 [ 1846.914641][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1846.956226][T17032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1846.965622][T17032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1846.977722][ T5148] Bluetooth: hci5: command tx timeout [ 1847.225967][T28433] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6105'. [ 1847.944532][T11233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1847.957527][T11233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1847.967722][T11233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1847.980046][T11233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1847.994344][T11233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1848.579115][T28444] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6126'. [ 1848.878698][T28454] netlink: zone id is out of range [ 1848.901418][T28454] netlink: zone id is out of range [ 1848.924214][T28454] netlink: zone id is out of range [ 1848.949477][T28454] netlink: zone id is out of range [ 1848.966643][T28454] netlink: zone id is out of range [ 1848.974729][T28439] chnl_net:caif_netlink_parms(): no params data found [ 1848.996686][T28454] netlink: zone id is out of range [ 1849.014587][T28454] netlink: zone id is out of range [ 1849.035432][T28454] netlink: zone id is out of range [ 1849.061739][ T5148] Bluetooth: hci5: command tx timeout [ 1849.074626][T28454] netlink: zone id is out of range [ 1849.103306][T28454] netlink: zone id is out of range [ 1849.505675][T28439] bridge0: port 1(bridge_slave_0) entered blocking state [ 1849.547967][T28439] bridge0: port 1(bridge_slave_0) entered disabled state [ 1849.577659][T28439] bridge_slave_0: entered allmulticast mode [ 1849.618517][T28439] bridge_slave_0: entered promiscuous mode [ 1849.629040][T28439] bridge0: port 2(bridge_slave_1) entered blocking state [ 1849.647649][T28439] bridge0: port 2(bridge_slave_1) entered disabled state [ 1849.655422][T28439] bridge_slave_1: entered allmulticast mode [ 1849.702377][T28439] bridge_slave_1: entered promiscuous mode [ 1850.097610][ T5148] Bluetooth: hci2: command tx timeout [ 1850.125201][T28465] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6130'. [ 1850.386054][T28439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1850.474132][T28439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1850.677368][ T9702] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1850.759444][T28439] team0: Port device team_slave_0 added [ 1850.887404][ T9702] usb 3-1: device descriptor read/64, error -71 [ 1851.137915][ T9702] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1851.332000][ T9702] usb 3-1: device descriptor read/64, error -71 [ 1851.490359][ T9702] usb usb3-port1: attempt power cycle [ 1851.878066][ T9702] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1851.927064][ T9702] usb 3-1: device descriptor read/8, error -71 [ 1852.168368][ T9702] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1852.186446][ T5148] Bluetooth: hci2: command tx timeout [ 1852.267957][ T9702] usb 3-1: device descriptor read/8, error -71 [ 1852.394761][ T9702] usb usb3-port1: unable to enumerate USB device [ 1852.587784][ T5938] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1852.659047][T28492] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6136'. [ 1852.747762][ T5938] usb 1-1: Using ep0 maxpacket: 8 [ 1852.761721][ T5938] usb 1-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 1852.774290][T28439] team0: Port device team_slave_1 added [ 1852.782866][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1852.817828][ T5938] usb 1-1: Product: syz [ 1852.842227][ T5938] usb 1-1: Manufacturer: syz [ 1852.873078][ T5938] usb 1-1: SerialNumber: syz [ 1852.911576][ T5938] usb 1-1: config 0 descriptor?? [ 1852.922066][ T6131] : left promiscuous mode [ 1852.943957][ T5938] go7007 1-1:0.0: probe with driver go7007 failed with error -12 [ 1852.992717][T28439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1853.014525][T28439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1853.046768][T28439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1853.063410][T28439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1853.122247][T28439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1853.257858][T28439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1853.477346][ T9702] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1853.658289][ T9702] usb 6-1: Using ep0 maxpacket: 16 [ 1853.705184][ T9702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1853.755957][ T9702] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1853.798167][ T9702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1853.863939][ T9702] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1853.887805][T21184] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1853.897729][T28439] hsr_slave_0: entered promiscuous mode [ 1853.957823][ T9702] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 1853.972233][T28439] hsr_slave_1: entered promiscuous mode [ 1853.988940][ T9702] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 1854.018426][T28439] debugfs: 'hsr0' already exists in 'hsr' [ 1854.024718][T28439] Cannot create hsr debugfs directory [ 1854.034977][ T9702] usb 6-1: Product: syz [ 1854.044627][ T9702] usb 6-1: Manufacturer: syz [ 1854.062076][ T9702] usb 6-1: SerialNumber: syz [ 1854.097914][T21184] usb 3-1: Using ep0 maxpacket: 8 [ 1854.109178][ T9702] usb 6-1: config 0 descriptor?? [ 1854.153233][T21184] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1854.192725][ T9702] usb 6-1: NFC: intf ffff88804ea29000 id ffffffff8edb26c0 [ 1854.235927][T21184] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1854.258738][ T6131] hsr_slave_0: left promiscuous mode [ 1854.269921][ T5148] Bluetooth: hci2: command tx timeout [ 1854.287802][T21184] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1854.337155][ T6131] hsr_slave_1: left promiscuous mode [ 1854.349965][T21184] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1854.448620][T21184] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1854.522099][T21184] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1854.666495][T28510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1854.719197][T28510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1854.801845][T21184] usb 3-1: GET_CAPABILITIES returned 0 [ 1854.815351][T21184] usbtmc 3-1:16.0: can't read capabilities [ 1854.906524][ T9702] usb 1-1: USB disconnect, device number 35 [ 1855.680453][T28521] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6139'. [ 1856.339683][ T5148] Bluetooth: hci2: command tx timeout [ 1856.937034][T21184] usb 6-1: USB disconnect, device number 110 [ 1857.436443][T28526] syzkaller0: entered promiscuous mode [ 1857.443369][T28526] syzkaller0: entered allmulticast mode [ 1857.663507][ T5938] usb 3-1: USB disconnect, device number 3 [ 1858.425641][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.433959][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1860.435217][T28545] tipc: Enabled bearer , priority 0 [ 1860.448058][T28547] syzkaller0: entered promiscuous mode [ 1860.453714][T28547] syzkaller0: entered allmulticast mode [ 1860.485307][T28552] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6146'. [ 1860.501014][ T30] audit: type=1326 audit(1769412337.550:5369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28553 comm="syz.3.6147" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf747d539 code=0x0 [ 1860.532677][T28543] tipc: Resetting bearer [ 1860.576452][T28543] tipc: Disabling bearer [ 1860.607590][T28552] FAULT_INJECTION: forcing a failure. [ 1860.607590][T28552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1860.666730][T28552] CPU: 1 UID: 0 PID: 28552 Comm: syz.0.6146 Tainted: G L syzkaller #0 PREEMPT(full) [ 1860.666768][T28552] Tainted: [L]=SOFTLOCKUP [ 1860.666775][T28552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1860.666785][T28552] Call Trace: [ 1860.666791][T28552] [ 1860.666799][T28552] dump_stack_lvl+0xe8/0x150 [ 1860.666825][T28552] should_fail_ex+0x412/0x560 [ 1860.666854][T28552] _copy_from_user+0x2d/0xb0 [ 1860.666872][T28552] get_compat_msghdr+0xb3/0x4c0 [ 1860.666893][T28552] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1860.666910][T28552] ? rcu_is_watching+0x15/0xb0 [ 1860.666929][T28552] ? ___sys_sendmsg+0x2b5/0x360 [ 1860.666949][T28552] ___sys_sendmsg+0x201/0x360 [ 1860.666968][T28552] ? __pfx____sys_sendmsg+0x10/0x10 [ 1860.666985][T28552] ? do_user_addr_fault+0xbb3/0x1360 [ 1860.667013][T28552] ? lockdep_hardirqs_on+0x7a/0x110 [ 1860.667053][T28552] __sys_sendmmsg+0x2e7/0x4e0 [ 1860.667072][T28552] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1860.667094][T28552] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1860.667128][T28552] ? ksys_write+0x242/0x270 [ 1860.667144][T28552] ? __pfx_ksys_write+0x10/0x10 [ 1860.667161][T28552] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1860.667204][T28552] __do_fast_syscall_32+0x1d2/0x540 [ 1860.667221][T28552] ? lockdep_hardirqs_on+0x7a/0x110 [ 1860.667247][T28552] ? do_fast_syscall_32+0x33/0x70 [ 1860.667276][T28552] ? asm_int80_emulation+0x1a/0x20 [ 1860.667295][T28552] ? do_int80_emulation+0x20e/0x400 [ 1860.667330][T28552] do_fast_syscall_32+0x33/0x70 [ 1860.667361][T28552] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1860.667386][T28552] RIP: 0023:0xf7f84539 [ 1860.667404][T28552] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1860.667422][T28552] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1860.667448][T28552] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080007fc0 [ 1860.667463][T28552] RDX: 000000000800001d RSI: 000000000000001c RDI: 0000000000000000 [ 1860.667476][T28552] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1860.667489][T28552] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1860.667511][T28552] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1860.667540][T28552] [ 1860.968103][T28556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6146'. [ 1861.138073][T28556] bond0: (slave bond_slave_0): Releasing backup interface [ 1864.317414][ T5910] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1864.344931][T28439] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1864.510958][ T5910] usb 1-1: Using ep0 maxpacket: 8 [ 1864.519252][T28439] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1864.549968][ T5910] usb 1-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 1864.586845][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1864.633437][ T5910] usb 1-1: Product: syz [ 1864.646304][ T5910] usb 1-1: Manufacturer: syz [ 1864.667090][ T5910] usb 1-1: SerialNumber: syz [ 1864.719604][ T5910] usb 1-1: config 0 descriptor?? [ 1864.771182][ T5910] go7007 1-1:0.0: probe with driver go7007 failed with error -12 [ 1865.272753][T28439] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1865.361944][T28439] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1867.062050][T28439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1867.098699][T28439] 8021q: adding VLAN 0 to HW filter on device team0 [ 1867.135028][T21612] bridge0: port 1(bridge_slave_0) entered blocking state [ 1867.142282][T21612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1867.229611][T21612] bridge0: port 2(bridge_slave_1) entered blocking state [ 1867.236846][T21612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1867.447005][T28439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1867.457926][T21184] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1867.503952][T28439] veth0_vlan: entered promiscuous mode [ 1867.618355][T21184] usb 3-1: Using ep0 maxpacket: 16 [ 1867.632388][T21184] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1867.640523][T28439] veth1_vlan: entered promiscuous mode [ 1867.654287][T21184] usb 3-1: config 0 has no interface number 0 [ 1867.661481][ T5910] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1867.667561][T21184] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1867.724937][T21184] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1867.734646][T21184] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1867.751893][T21184] usb 3-1: Product: syz [ 1867.767651][T21184] usb 3-1: SerialNumber: syz [ 1867.779821][T28439] veth0_macvtap: entered promiscuous mode [ 1867.794050][T21184] usb 3-1: config 0 descriptor?? [ 1867.801064][T28439] veth1_macvtap: entered promiscuous mode [ 1867.840088][T21184] cm109 3-1:0.8: invalid payload size 208, expected 4 [ 1867.847670][ T5910] usb 6-1: device descriptor read/64, error -71 [ 1867.858747][T28439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1867.876672][T21184] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input166 [ 1867.919413][T28439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1867.982323][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1867.998205][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1868.040829][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1868.066519][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1868.093925][T21184] usb 1-1: USB disconnect, device number 36 [ 1868.098952][ T5910] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1868.262150][ T5910] usb 6-1: device descriptor read/64, error -71 [ 1868.280451][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1868.289640][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1868.297035][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1868.305318][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1868.314944][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1868.322743][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1868.330395][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1868.338005][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1868.345306][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1868.352507][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1868.374465][T21184] usb 3-1: USB disconnect, device number 4 [ 1868.380464][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1868.389369][ T5910] usb usb6-port1: attempt power cycle [ 1868.402528][T21184] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1868.490897][T21612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1868.504717][T21612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1868.552145][T21612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1868.565809][T21612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1868.735991][ T5910] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1868.790535][ T5910] usb 6-1: device descriptor read/8, error -71 [ 1868.811331][T28684] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6163'. [ 1869.037977][ T5910] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1869.080304][ T5896] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1869.090356][ T5910] usb 6-1: device descriptor read/8, error -71 [ 1869.207778][ T5910] usb usb6-port1: unable to enumerate USB device [ 1869.245545][ T5896] usb 2-1: device descriptor read/64, error -71 [ 1869.577935][ T5896] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1869.590313][ T5836] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1869.757903][ T5896] usb 2-1: device descriptor read/64, error -71 [ 1869.758058][ T5836] usb 3-1: Using ep0 maxpacket: 8 [ 1869.804086][ T5836] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1869.842858][ T5836] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1869.876715][ T5836] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1869.907660][ T5836] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1869.908432][ T5896] usb usb2-port1: attempt power cycle [ 1869.969553][ T5836] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1869.995362][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1870.261194][ T5836] usb 3-1: GET_CAPABILITIES returned 0 [ 1870.283229][ T5836] usbtmc 3-1:16.0: can't read capabilities [ 1870.299597][ T5896] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1870.441245][ T5896] usb 2-1: device descriptor read/8, error -71 [ 1870.693349][T28703] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6165'. [ 1870.728216][ T5896] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1870.762963][ T5896] usb 2-1: device descriptor read/8, error -71 [ 1870.768121][ T5836] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1870.878145][ T5896] usb usb2-port1: unable to enumerate USB device [ 1870.957661][ T5836] usb 1-1: Using ep0 maxpacket: 8 [ 1871.006461][ T5836] usb 1-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 1871.017562][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1871.027754][ T5836] usb 1-1: Product: syz [ 1871.032068][ T5836] usb 1-1: Manufacturer: syz [ 1871.036864][ T5836] usb 1-1: SerialNumber: syz [ 1871.043746][ T5836] usb 1-1: config 0 descriptor?? [ 1871.072395][ T5836] go7007 1-1:0.0: probe with driver go7007 failed with error -12 [ 1871.502682][T28707] FAULT_INJECTION: forcing a failure. [ 1871.502682][T28707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1871.528216][T28707] CPU: 0 UID: 0 PID: 28707 Comm: syz.5.6168 Tainted: G L syzkaller #0 PREEMPT(full) [ 1871.528266][T28707] Tainted: [L]=SOFTLOCKUP [ 1871.528278][T28707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1871.528297][T28707] Call Trace: [ 1871.528306][T28707] [ 1871.528314][T28707] dump_stack_lvl+0xe8/0x150 [ 1871.528345][T28707] should_fail_ex+0x412/0x560 [ 1871.528379][T28707] _copy_from_iter+0x1d3/0x1670 [ 1871.528411][T28707] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1871.528444][T28707] ? policy_nodemask+0x27c/0x710 [ 1871.528468][T28707] ? __pfx__copy_from_iter+0x10/0x10 [ 1871.528506][T28707] ? set_page_refcounted+0xa0/0x1e0 [ 1871.528531][T28707] ? page_copy_sane+0x4e/0x270 [ 1871.528552][T28707] copy_page_from_iter+0xdd/0x170 [ 1871.528576][T28707] tun_get_user+0x1d4b/0x3dd0 [ 1871.528599][T28707] ? tun_get_user+0x6ff/0x3dd0 [ 1871.528639][T28707] ? aa_file_perm+0x440/0x1630 [ 1871.528670][T28707] ? __pfx_tun_get_user+0x10/0x10 [ 1871.528696][T28707] ? __lock_acquire+0x6b5/0x2cf0 [ 1871.528734][T28707] ? ref_tracker_alloc+0x363/0x4d0 [ 1871.528766][T28707] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1871.528798][T28707] ? tun_get+0x1c/0x2f0 [ 1871.528821][T28707] ? tun_get+0x1c/0x2f0 [ 1871.528850][T28707] ? tun_get+0x1c/0x2f0 [ 1871.528873][T28707] ? tun_get+0x1c/0x2f0 [ 1871.528900][T28707] tun_chr_write_iter+0x113/0x200 [ 1871.528927][T28707] vfs_write+0x61d/0xb90 [ 1871.528956][T28707] ? __pfx_vfs_write+0x10/0x10 [ 1871.528986][T28707] ? __fget_files+0x2a/0x420 [ 1871.529031][T28707] ksys_write+0x150/0x270 [ 1871.529054][T28707] ? __pfx_ksys_write+0x10/0x10 [ 1871.529078][T28707] ? asm_int80_emulation+0x1a/0x20 [ 1871.529101][T28707] ? asm_int80_emulation+0x1a/0x20 [ 1871.529122][T28707] do_int80_emulation+0x111/0x400 [ 1871.529155][T28707] ? clear_bhb_loop+0x60/0xb0 [ 1871.529176][T28707] ? clear_bhb_loop+0x60/0xb0 [ 1871.529201][T28707] asm_int80_emulation+0x1a/0x20 [ 1871.529220][T28707] RIP: 0023:0xf714572b [ 1871.529239][T28707] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1871.529256][T28707] RSP: 002b:00000000f540644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 1871.529279][T28707] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000080 [ 1871.529293][T28707] RDX: 00000000000000be RSI: 0000000000000000 RDI: 0000000000000000 [ 1871.529305][T28707] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1871.529318][T28707] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1871.529331][T28707] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1871.529361][T28707] [ 1872.068065][T28717] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6169' sets config #0 [ 1872.122235][T28717] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.6169' sets config #1 [ 1872.750007][T28722] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6171'. [ 1873.080128][ T5896] usb 1-1: USB disconnect, device number 37 [ 1873.332010][T28732] net_ratelimit: 7 callbacks suppressed [ 1873.332027][T28732] netlink: zone id is out of range [ 1873.352313][T28732] netlink: zone id is out of range [ 1873.372681][T28732] netlink: zone id is out of range [ 1873.388341][T28732] netlink: zone id is out of range [ 1873.405364][T28732] netlink: zone id is out of range [ 1873.414113][T28732] netlink: zone id is out of range [ 1873.443363][T28732] netlink: zone id is out of range [ 1873.481389][T28732] netlink: zone id is out of range [ 1873.514684][T28732] netlink: zone id is out of range [ 1873.555318][T28732] netlink: zone id is out of range [ 1873.957554][ T5836] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1874.147571][ T5836] usb 2-1: Using ep0 maxpacket: 8 [ 1874.391754][ T5836] usb 2-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 1874.425496][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1874.493790][ T5836] usb 2-1: Product: syz [ 1874.513521][ T5836] usb 2-1: Manufacturer: syz [ 1874.532994][ T5836] usb 2-1: SerialNumber: syz [ 1874.558348][ T5836] usb 2-1: config 0 descriptor?? [ 1874.597830][ T5836] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 1875.109712][T28759] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6179'. [ 1875.857960][T11233] Bluetooth: hci4: command 0x0406 tx timeout [ 1876.206680][T28678] usb 2-1: USB disconnect, device number 8 [ 1876.373240][T26445] usb 3-1: USB disconnect, device number 5 [ 1876.601296][T28766] vti0: entered promiscuous mode [ 1876.601322][T28766] vti0: entered allmulticast mode [ 1876.654356][ T30] audit: type=1326 audit(1769412353.700:5370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28767 comm="syz.1.6183" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf748d539 code=0x0 [ 1877.096242][T28783] tipc: Enabled bearer , priority 0 [ 1877.137156][T28783] syzkaller0: entered promiscuous mode [ 1877.162170][T28783] syzkaller0: entered allmulticast mode [ 1877.429175][T26445] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1877.645603][T26445] usb 6-1: Using ep0 maxpacket: 32 [ 1877.680653][T26445] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 1877.709922][T26445] usb 6-1: config 0 has no interface number 0 [ 1877.730432][T28678] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1877.758469][T26445] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1877.843526][T26445] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1877.867076][T26445] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1877.896406][T26445] usb 6-1: Product: syz [ 1877.907846][T26445] usb 6-1: Manufacturer: syz [ 1877.918179][T26445] usb 6-1: SerialNumber: syz [ 1877.958772][T26445] usb 6-1: config 0 descriptor?? [ 1877.985093][T28783] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1877.987636][T28678] usb 3-1: Using ep0 maxpacket: 8 [ 1878.163800][T28678] usb 3-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 1878.173412][T28678] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1878.197296][T28678] usb 3-1: Product: syz [ 1878.207694][T28678] usb 3-1: Manufacturer: syz [ 1878.217748][T28678] usb 3-1: SerialNumber: syz [ 1878.239346][T28678] usb 3-1: config 0 descriptor?? [ 1878.248767][ T5910] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1878.266875][T28780] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1878.306768][T28678] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 1878.417302][ T5910] usb 2-1: Using ep0 maxpacket: 8 [ 1878.478623][ T5910] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1878.501437][T26445] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1878.529093][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1878.540586][T26445] asix 6-1:0.188: probe with driver asix failed with error -61 [ 1878.627145][ T5910] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1878.657872][ T5910] pvrusb2: ********** [ 1878.661902][ T5910] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1878.688058][ T5910] pvrusb2: Important functionality might not be entirely working. [ 1878.730455][ T5910] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1878.756420][ T5910] pvrusb2: ********** [ 1878.841780][ T2345] pvrusb2: Invalid write control endpoint [ 1879.036706][T28792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6188'. [ 1879.120543][ T2345] pvrusb2: Invalid write control endpoint [ 1879.132368][ T5910] usb 2-1: USB disconnect, device number 9 [ 1879.139607][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1879.164453][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1879.191629][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1879.216444][ T2345] pvrusb2: Device being rendered inoperable [ 1879.233288][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1879.252823][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1879.301951][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1879.323840][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1879.334658][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1879.371898][T28801] netlink: 181328 bytes leftover after parsing attributes in process `syz.0.6189'. [ 1879.999544][T28678] usb 6-1: USB disconnect, device number 115 [ 1880.022270][T28779] tipc: Resetting bearer [ 1880.160996][T28779] tipc: Disabling bearer [ 1880.176346][ T5910] usb 3-1: USB disconnect, device number 6 [ 1880.367977][ T9702] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1880.507429][ T9702] usb 2-1: device descriptor read/64, error -71 [ 1880.657599][ T5910] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1880.757410][ T9702] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1880.823536][ T5910] usb 3-1: Using ep0 maxpacket: 8 [ 1880.838577][ T5910] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1880.857118][ T5910] usb 3-1: config 0 has no interface number 0 [ 1880.867907][ T5910] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1880.902046][ T5910] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1880.916385][ T9702] usb 2-1: device descriptor read/64, error -71 [ 1880.935654][ T5910] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1880.950666][ T5910] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1880.962819][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1881.004423][ T5910] usb 3-1: config 0 descriptor?? [ 1881.020547][T28823] vti0: entered promiscuous mode [ 1881.021308][ T5910] ldusb 3-1:0.55: Interrupt in endpoint not found [ 1881.026252][T28823] vti0: entered allmulticast mode [ 1881.038820][ T9702] usb usb2-port1: attempt power cycle [ 1881.233599][ T5910] usb 3-1: USB disconnect, device number 7 [ 1881.247739][ T5836] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1881.386377][T28829] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6198'. [ 1881.395862][ T9702] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1881.428594][ T9702] usb 2-1: device descriptor read/8, error -71 [ 1881.437813][ T5836] usb 6-1: Using ep0 maxpacket: 8 [ 1881.450283][ T5836] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1881.490851][ T5836] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1881.514446][ T5836] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1881.539328][ T5836] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1881.567110][ T5836] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1881.585912][ T5836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1881.667862][ T9702] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1881.708071][ T9702] usb 2-1: device descriptor read/8, error -71 [ 1881.810507][ T5836] usb 6-1: GET_CAPABILITIES returned 0 [ 1881.822283][ T9702] usb usb2-port1: unable to enumerate USB device [ 1881.839571][ T5836] usbtmc 6-1:16.0: can't read capabilities [ 1882.339151][T28841] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6195'. [ 1883.097312][T28678] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1883.279224][T28678] usb 1-1: Using ep0 maxpacket: 8 [ 1883.388462][T28678] usb 1-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 1883.433953][T28678] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1883.475759][T28678] usb 1-1: Product: syz [ 1883.490061][T28678] usb 1-1: Manufacturer: syz [ 1883.502507][T28678] usb 1-1: SerialNumber: syz [ 1883.539046][T28678] usb 1-1: config 0 descriptor?? [ 1883.613075][T28678] go7007 1-1:0.0: probe with driver go7007 failed with error -12 [ 1885.593247][ T9702] usb 6-1: USB disconnect, device number 116 [ 1885.731301][T28876] net_ratelimit: 9 callbacks suppressed [ 1885.731316][T28876] netlink: zone id is out of range [ 1885.743519][T28876] netlink: zone id is out of range [ 1885.766030][T28876] netlink: zone id is out of range [ 1885.778619][T28876] netlink: zone id is out of range [ 1885.791757][T28876] netlink: zone id is out of range [ 1885.803807][T28876] netlink: zone id is out of range [ 1885.815889][T28876] netlink: zone id is out of range [ 1885.826164][T28876] netlink: zone id is out of range [ 1885.837894][T28876] netlink: zone id is out of range [ 1885.849034][T28876] netlink: zone id is out of range [ 1885.990142][ T9702] usb 1-1: USB disconnect, device number 38 [ 1886.354363][T28885] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6213'. [ 1886.645896][T28899] binder: BINDER_SET_CONTEXT_MGR already set [ 1886.660555][T28899] binder: 28898:28899 ioctl 40046207 0 returned -16 [ 1886.683522][T28899] netlink: 'syz.1.6218': attribute type 2 has an invalid length. [ 1888.417500][T28925] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6226'. [ 1889.544062][T28944] netlink: 'syz.2.6230': attribute type 239 has an invalid length. [ 1889.837333][ T5938] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1889.987511][ T5938] usb 1-1: device descriptor read/64, error -71 [ 1890.257517][ T5938] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1890.418972][ T5938] usb 1-1: device descriptor read/64, error -71 [ 1890.558170][ T5938] usb usb1-port1: attempt power cycle [ 1890.907794][ T5938] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1890.958836][ T5938] usb 1-1: device descriptor read/8, error -71 [ 1891.201757][ T5938] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1891.249469][ T5938] usb 1-1: device descriptor read/8, error -71 [ 1891.378725][ T5938] usb usb1-port1: unable to enumerate USB device [ 1891.430151][T28967] net_ratelimit: 25 callbacks suppressed [ 1891.430175][T28967] netlink: zone id is out of range [ 1891.477881][T28967] netlink: zone id is out of range [ 1891.493293][T28967] netlink: zone id is out of range [ 1891.513151][T28967] netlink: zone id is out of range [ 1891.527293][T28967] netlink: zone id is out of range [ 1891.544715][T28967] netlink: zone id is out of range [ 1891.560963][T28967] netlink: zone id is out of range [ 1891.580559][T28967] netlink: zone id is out of range [ 1891.597048][T28967] netlink: zone id is out of range [ 1891.619994][T28967] netlink: zone id is out of range [ 1891.758627][T28964] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6235'. [ 1892.509324][T28980] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6237'. [ 1894.497412][ T5836] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1894.615538][ T30] audit: type=1326 audit(1769412371.660:5371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29006 comm="syz.1.6247" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf748d539 code=0x0 [ 1894.700777][ T5836] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1894.739220][ T5836] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1894.779484][ T5836] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1894.811975][ T5836] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1894.843409][ T5836] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1894.877792][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1894.896274][ T5836] usb 3-1: Product: syz [ 1894.909681][ T5836] usb 3-1: Manufacturer: syz [ 1894.924784][ T5836] usb 3-1: SerialNumber: syz [ 1894.998079][T28678] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1895.170293][T28678] usb 1-1: Using ep0 maxpacket: 8 [ 1895.185996][ T5836] usb 3-1: cannot find UAC_HEADER [ 1895.197287][T28678] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1895.210344][T28678] usb 1-1: config 0 has no interface number 0 [ 1895.224304][T28678] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1895.240251][T28678] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1895.255003][T28678] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1895.271607][T28678] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1895.283816][ T5836] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1895.302118][T28678] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1895.314425][ T5836] usb 3-1: USB disconnect, device number 8 [ 1895.345033][T19124] udevd[19124]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1895.349009][T28678] usb 1-1: config 0 descriptor?? [ 1895.414612][T28678] ldusb 1-1:0.55: Interrupt in endpoint not found [ 1896.148725][T29023] netlink: 'syz.1.6250': attribute type 2 has an invalid length. [ 1896.163109][T29023] loop5: detected capacity change from 0 to 7 [ 1896.215984][T29024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6250'. [ 1896.295147][T29023] Dev loop5: unable to read RDB block 7 [ 1896.301609][T29023] loop5: unable to read partition table [ 1896.313299][T29023] loop5: partition table beyond EOD, truncated [ 1896.325103][T29023] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 1896.337681][T28678] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1896.517319][T28678] usb 3-1: Using ep0 maxpacket: 8 [ 1896.555810][T28678] usb 3-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 1896.595839][T28678] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1896.643825][T28678] usb 3-1: Product: syz [ 1896.666737][T28678] usb 3-1: Manufacturer: syz [ 1896.689801][T28678] usb 3-1: SerialNumber: syz [ 1896.722582][T28678] usb 3-1: config 0 descriptor?? [ 1896.763375][T28678] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 1897.443739][T29032] netlink: 'syz.5.6252': attribute type 10 has an invalid length. [ 1897.505854][T29033] netlink: 'syz.5.6252': attribute type 10 has an invalid length. [ 1897.625034][T29032] team0: Port device netdevsim0 added [ 1897.739361][T29033] team0: Port device netdevsim0 removed [ 1897.806585][ T5910] usb 1-1: USB disconnect, device number 43 [ 1897.836909][T29033] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1897.990563][T29039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6253'. [ 1898.986096][T26445] usb 3-1: USB disconnect, device number 9 [ 1900.182120][ T30] audit: type=1326 audit(1769412377.230:5372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29069 comm="syz.0.6260" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f84539 code=0x0 [ 1902.125397][T29081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6262'. [ 1902.420509][T29094] net_ratelimit: 9 callbacks suppressed [ 1902.420531][T29094] openvswitch: netlink: Message has 1 unknown bytes. [ 1902.524734][T29097] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6266'. [ 1902.579385][T29094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1903.811405][T29112] openvswitch: netlink: Message has 1 unknown bytes. [ 1903.837296][T29112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1903.958376][T29114] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6268'. [ 1904.698239][T26445] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1904.890884][T26445] usb 3-1: Using ep0 maxpacket: 8 [ 1904.933747][T26445] usb 3-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 1904.979162][T26445] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1905.015139][T26445] usb 3-1: Product: syz [ 1905.039862][T26445] usb 3-1: Manufacturer: syz [ 1905.058896][T26445] usb 3-1: SerialNumber: syz [ 1905.090586][T26445] usb 3-1: config 0 descriptor?? [ 1905.125095][T26445] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 1906.149202][ T30] audit: type=1326 audit(1769412383.160:5373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29133 comm="syz.1.6275" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf748d539 code=0x0 [ 1906.748826][T29141] netlink: 1344 bytes leftover after parsing attributes in process `syz.5.6276'. [ 1906.924887][T28678] usb 3-1: USB disconnect, device number 10 [ 1907.434684][T29150] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6277'. [ 1908.743969][T29171] netlink: 'syz.1.6283': attribute type 10 has an invalid length. [ 1908.844156][T29172] netlink: 'syz.1.6283': attribute type 10 has an invalid length. [ 1909.385208][T29185] openvswitch: netlink: Message has 1 unknown bytes. [ 1909.412817][T29185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1909.544063][T29186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6284'. [ 1909.729139][T29171] team0: Port device netdevsim0 added [ 1909.802602][T29172] team0: Port device netdevsim0 removed [ 1909.819177][T29172] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1911.117271][T26445] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1911.289117][T26445] usb 2-1: Using ep0 maxpacket: 8 [ 1911.348447][T26445] usb 2-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 1911.363351][T26445] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1911.384321][T26445] usb 2-1: Product: syz [ 1911.396742][T26445] usb 2-1: Manufacturer: syz [ 1911.441080][T26445] usb 2-1: SerialNumber: syz [ 1911.480651][T26445] usb 2-1: config 0 descriptor?? [ 1911.541623][T26445] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 1911.604731][T29218] netlink: 'syz.5.6295': attribute type 1 has an invalid length. [ 1911.694396][T29218] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1911.730691][T29220] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1911.781140][T29220] bond1: (slave batadv1): making interface the new active one [ 1911.820749][T29220] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 1912.725702][T29230] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6297'. [ 1914.049395][T28678] usb 2-1: USB disconnect, device number 14 [ 1914.812878][T29260] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6301'. [ 1914.899956][T29261] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6304'. [ 1915.087259][T26445] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1915.281538][T26445] usb 6-1: Using ep0 maxpacket: 32 [ 1915.310249][T26445] usb 6-1: config 0 has an invalid interface number: 239 but max is 0 [ 1915.325517][T26445] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1915.336411][T26445] usb 6-1: config 0 has no interface number 0 [ 1915.344815][T26445] usb 6-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 1915.359780][T26445] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1915.372993][T26445] usb 6-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 1915.389066][T26445] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 1915.403668][T26445] usb 6-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 1915.414717][T26445] usb 6-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 1915.430363][T26445] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1915.441091][T26445] usb 6-1: config 0 interface 239 has no altsetting 0 [ 1915.453919][T26445] usb 6-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1915.465704][T26445] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.554231][T26445] usb 6-1: Product: syz [ 1915.569006][T26445] usb 6-1: Manufacturer: syz [ 1915.581565][T26445] usb 6-1: SerialNumber: syz [ 1915.639657][T29270] xt_hashlimit: size too large, truncated to 1048576 [ 1915.663538][T26445] usb 6-1: config 0 descriptor?? [ 1915.685766][T29260] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1915.739702][T29260] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1915.867320][ T5938] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1916.037265][ T5938] usb 2-1: Using ep0 maxpacket: 8 [ 1916.049815][ T5938] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1916.075034][ T5938] usb 2-1: config 0 has no interface number 0 [ 1916.105604][ T5938] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1916.191136][ T5938] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1916.241836][ T5938] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1916.301454][ T5938] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1916.328455][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1916.432493][ T5938] usb 2-1: config 0 descriptor?? [ 1916.485578][ T5938] ldusb 2-1:0.55: Interrupt in endpoint not found [ 1916.688458][T26445] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 1916.866955][T26445] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 1916.895874][T26445] usb 1-1: config 0 has no interface number 0 [ 1916.912800][T26445] usb 1-1: config 0 interface 113 has no altsetting 0 [ 1916.924348][T26445] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1916.936690][T26445] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1916.945515][T26445] usb 1-1: Product: syz [ 1916.953271][T26445] usb 1-1: Manufacturer: syz [ 1916.959630][T26445] usb 1-1: SerialNumber: syz [ 1916.969177][T26445] usb 1-1: config 0 descriptor?? [ 1917.186018][T29274] sctp: [Deprecated]: syz.0.6310 (pid 29274) Use of int in maxseg socket option. [ 1917.186018][T29274] Use struct sctp_assoc_value instead [ 1917.283057][T29274] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1917.661377][ T9702] usb 6-1: USB disconnect, device number 117 [ 1917.951991][T29290] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6314'. [ 1918.467005][T20258] usb 2-1: USB disconnect, device number 15 [ 1919.864253][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1919.879992][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1920.652344][T29328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1920.709909][T29328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1921.910938][T29340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6325'. [ 1922.262482][T21184] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1922.460406][T21184] usb 3-1: Using ep0 maxpacket: 32 [ 1922.493371][T21184] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 1922.524719][T21184] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1922.570828][T21184] usb 3-1: config 0 has no interface number 0 [ 1922.594163][T21184] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 1922.646594][T21184] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1922.714781][T21184] usb 3-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 1922.773798][T21184] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 1922.829613][T21184] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 1922.872274][T21184] usb 3-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 1922.914063][T21184] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1922.939781][T21184] usb 3-1: config 0 interface 239 has no altsetting 0 [ 1922.990194][T21184] usb 3-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1923.019978][T21184] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1923.054135][T21184] usb 3-1: Product: syz [ 1923.071214][T21184] usb 3-1: Manufacturer: syz [ 1923.093399][T21184] usb 3-1: SerialNumber: syz [ 1923.139409][T21184] usb 3-1: config 0 descriptor?? [ 1923.150358][T29341] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1923.160152][T29341] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1923.611298][T29346] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6328'. [ 1924.078236][T20258] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1924.140944][T29362] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6331'. [ 1924.287305][T20258] usb 6-1: Using ep0 maxpacket: 8 [ 1924.304289][T20258] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1924.327658][T20258] usb 6-1: config 0 has no interface number 0 [ 1924.354372][T20258] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1924.394888][T20258] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1924.439924][T20258] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1924.473370][T20258] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1924.500586][T20258] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1924.537084][T20258] usb 6-1: config 0 descriptor?? [ 1924.569412][T20258] ldusb 6-1:0.55: Interrupt in endpoint not found [ 1924.801935][T20258] usb 3-1: USB disconnect, device number 11 [ 1925.354981][T29374] openvswitch: netlink: Message has 1 unknown bytes. [ 1925.362336][T29374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1926.114399][T29385] netlink: zone id is out of range [ 1926.136408][T29385] netlink: zone id is out of range [ 1926.161926][T29385] netlink: zone id is out of range [ 1926.185973][T29385] netlink: zone id is out of range [ 1926.218939][T29385] netlink: zone id is out of range [ 1926.247861][T29385] netlink: zone id is out of range [ 1926.268313][T29385] netlink: zone id is out of range [ 1926.280760][T29386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1926.298107][T29385] netlink: zone id is out of range [ 1926.321077][T29386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1926.896268][ T9702] usb 6-1: USB disconnect, device number 118 [ 1928.218058][T21184] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1928.667841][T21184] usb 6-1: device descriptor read/64, error -71 [ 1928.952982][T21184] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1929.148018][T21184] usb 6-1: device descriptor read/64, error -71 [ 1929.257710][T21184] usb usb6-port1: attempt power cycle [ 1929.607319][T21184] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1929.664784][T21184] usb 6-1: device descriptor read/8, error -71 [ 1929.865620][T29413] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6344'. [ 1929.918382][T21184] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1929.947945][T21184] usb 6-1: device descriptor read/8, error -71 [ 1930.070928][T21184] usb usb6-port1: unable to enumerate USB device [ 1930.734870][ T80] bridge_slave_1: left allmulticast mode [ 1930.787315][ T80] bridge_slave_1: left promiscuous mode [ 1930.808790][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 1930.882689][ T80] bridge_slave_0: left allmulticast mode [ 1930.888736][ T80] bridge_slave_0: left promiscuous mode [ 1930.899533][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 1930.952575][ T80] veth7: left allmulticast mode [ 1930.967680][ T80] veth7: left promiscuous mode [ 1931.001062][ T80] bridge2: port 3(veth7) entered disabled state [ 1931.032752][T29435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1931.088699][T29435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1931.124078][ T80] veth0_to_bond: left allmulticast mode [ 1931.178043][ T80] veth0_to_bond: left promiscuous mode [ 1931.190107][ T80] bridge2: port 2(veth0_to_bond) entered disabled state [ 1931.220829][T29437] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6347'. [ 1931.258300][ T80] veth5: left allmulticast mode [ 1931.263535][ T80] veth5: left promiscuous mode [ 1931.271494][ T80] bridge2: port 1(veth5) entered disabled state [ 1932.338543][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1932.351976][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1932.364534][ T80] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1932.375955][ T80] bond0 (unregistering): Released all slaves [ 1932.388523][ T80] bond1 (unregistering): Released all slaves [ 1932.405689][ T80] bond2 (unregistering): Released all slaves [ 1932.579968][ T80] bond3 (unregistering): Released all slaves [ 1932.804593][ T80] IPVS: stopping backup sync thread 24204 ... [ 1933.002092][T29448] net_ratelimit: 9 callbacks suppressed [ 1933.002136][T29448] netlink: zone id is out of range [ 1933.024958][T29448] netlink: zone id is out of range [ 1933.074972][T29448] netlink: zone id is out of range [ 1933.091081][T29448] netlink: zone id is out of range [ 1933.103330][T29448] netlink: zone id is out of range [ 1933.112937][T29448] netlink: zone id is out of range [ 1933.135235][T29448] netlink: zone id is out of range [ 1933.147025][T29448] netlink: zone id is out of range [ 1933.154875][T29448] netlink: zone id is out of range [ 1933.185357][T29448] netlink: zone id is out of range [ 1933.419312][ T80] hsr_slave_0: left promiscuous mode [ 1933.455005][ T80] hsr_slave_1: left promiscuous mode [ 1933.481462][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1933.518637][T20258] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1933.538804][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1933.697657][T20258] usb 3-1: Using ep0 maxpacket: 16 [ 1933.723482][T20258] usb 3-1: config 0 has no interfaces? [ 1933.782979][T20258] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1933.813854][T20258] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1933.872708][T20258] usb 3-1: Product: syz [ 1933.908249][T20258] usb 3-1: Manufacturer: syz [ 1933.937662][T20258] usb 3-1: SerialNumber: syz [ 1933.995155][T20258] usb 3-1: config 0 descriptor?? [ 1935.304270][T29473] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6357'. [ 1936.820900][T20258] usb 3-1: USB disconnect, device number 12 [ 1937.275237][ T80] team0 (unregistering): Port device team_slave_1 removed [ 1937.543175][T29482] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6359'. [ 1937.615516][ T80] team0 (unregistering): Port device team_slave_0 removed [ 1938.267661][T29499] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6363'. [ 1940.096166][T29520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1940.175062][T29520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1940.238344][T29520] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6367'. [ 1941.107507][T29532] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6371'. [ 1942.064388][T29530] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6373'. [ 1942.617928][T14260] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1942.781366][T14260] usb 6-1: Using ep0 maxpacket: 8 [ 1943.007870][T14260] usb 6-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 1943.037863][T14260] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1943.073881][T14260] usb 6-1: Product: syz [ 1943.086280][T14260] usb 6-1: Manufacturer: syz [ 1943.100424][T14260] usb 6-1: SerialNumber: syz [ 1943.130204][T14260] usb 6-1: config 0 descriptor?? [ 1943.272939][T14260] go7007 6-1:0.0: probe with driver go7007 failed with error -12 [ 1945.116593][T20258] usb 6-1: USB disconnect, device number 123 [ 1945.138178][T21207] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1945.327261][T21207] usb 3-1: Using ep0 maxpacket: 8 [ 1945.358849][T21207] usb 3-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 1945.396540][T21207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1945.425013][T21207] usb 3-1: Product: syz [ 1945.439713][T21207] usb 3-1: Manufacturer: syz [ 1945.454027][T21207] usb 3-1: SerialNumber: syz [ 1945.483810][T21207] usb 3-1: config 0 descriptor?? [ 1945.526089][T21207] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 1947.182015][T29586] fuse: Unknown parameter 'fsmagic' [ 1947.277643][T21207] usb 3-1: USB disconnect, device number 13 [ 1947.544051][ T5148] Bluetooth: hci1: command 0x0406 tx timeout [ 1947.741603][T29590] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6389'. [ 1948.179713][T20258] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1948.348341][T20258] usb 3-1: Using ep0 maxpacket: 8 [ 1948.365275][T20258] usb 3-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 1948.375438][T20258] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1948.448022][T20258] usb 3-1: Product: syz [ 1948.455584][T20258] usb 3-1: Manufacturer: syz [ 1948.475407][T20258] usb 3-1: SerialNumber: syz [ 1948.551179][T20258] usb 3-1: config 0 descriptor?? [ 1948.585504][T20258] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 1950.956598][T29625] net_ratelimit: 43 callbacks suppressed [ 1950.956621][T29625] netlink: zone id is out of range [ 1950.969913][T29625] netlink: zone id is out of range [ 1950.979583][T29625] netlink: zone id is out of range [ 1950.986069][T29625] netlink: zone id is out of range [ 1950.993468][T29625] netlink: zone id is out of range [ 1950.999523][T29625] netlink: zone id is out of range [ 1951.004956][T29625] netlink: zone id is out of range [ 1951.013683][T29625] netlink: zone id is out of range [ 1951.026195][T29625] netlink: zone id is out of range [ 1951.063947][T29625] netlink: zone id is out of range [ 1951.282847][T29633] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6399'. [ 1951.400782][T29637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1951.409992][T29636] IPVS: set_ctl: invalid protocol: 2 224.0.0.1:20002 [ 1951.410697][T29637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1951.562795][T21184] usb 3-1: USB disconnect, device number 14 [ 1951.787296][ T5896] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1951.949157][ T5896] usb 6-1: Using ep0 maxpacket: 8 [ 1951.973809][ T5896] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1952.007947][T29652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6405'. [ 1952.028145][ T5896] usb 6-1: config 0 has no interface number 0 [ 1952.050285][ T5896] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1952.082104][ T5896] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1952.118000][ T5896] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1952.133588][ T5896] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1952.145187][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1952.162184][ T5896] usb 6-1: config 0 descriptor?? [ 1952.172854][ T5896] ldusb 6-1:0.55: Interrupt in endpoint not found [ 1952.306813][T29656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1952.324791][T29656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1952.855944][ T30] audit: type=1326 audit(1769412429.900:5374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29662 comm="syz.1.6407" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf748d539 code=0x0 [ 1954.919174][T14260] usb 6-1: USB disconnect, device number 124 [ 1955.708443][ T5896] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 1955.880617][ T5896] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1955.898407][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1955.940841][ T5896] usb 2-1: config 0 descriptor?? [ 1955.953085][ T5896] cp210x 2-1:0.0: cp210x converter detected [ 1956.847855][T21184] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1957.018462][T21184] usb 3-1: Using ep0 maxpacket: 8 [ 1957.042316][T21184] usb 3-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 1957.067340][T21184] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1957.089964][T21184] usb 3-1: Product: syz [ 1957.100767][T21184] usb 3-1: Manufacturer: syz [ 1957.111361][T21184] usb 3-1: SerialNumber: syz [ 1957.129257][T21184] usb 3-1: config 0 descriptor?? [ 1957.180401][T21184] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 1957.349296][T29707] sg_write: data in/out 476/14 bytes for SCSI command 0x0-- guessing data in; [ 1957.349296][T29707] program syz.3.6419 not setting count and/or reply_len properly [ 1957.570804][T29711] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6417'. [ 1959.320079][T29723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1959.349868][T29723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1959.528471][T20258] usb 3-1: USB disconnect, device number 15 [ 1959.764881][ T5896] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1959.772696][ T5896] cp210x 2-1:0.0: querying part number failed [ 1959.803267][ T5896] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1959.832291][ T5896] usb 2-1: USB disconnect, device number 16 [ 1959.865091][ T5896] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1959.906856][ T5896] cp210x 2-1:0.0: device disconnected [ 1960.237158][T29743] net_ratelimit: 26 callbacks suppressed [ 1960.277300][T29743] sock: sock_set_timeout: `syz.1.6426' (pid 29743) tries to set negative timeout [ 1960.477114][T29748] netlink: zone id is out of range [ 1960.482701][T29748] netlink: zone id is out of range [ 1960.495319][T29748] netlink: zone id is out of range [ 1960.505406][T29748] netlink: zone id is out of range [ 1960.515646][T29748] netlink: zone id is out of range [ 1960.535444][T29744] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6428'. [ 1960.543584][T29748] netlink: zone id is out of range [ 1960.597341][T29748] netlink: zone id is out of range [ 1960.611718][T29748] netlink: zone id is out of range [ 1960.629333][T29748] netlink: zone id is out of range [ 1962.158154][T20258] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1962.437342][T20258] usb 3-1: Using ep0 maxpacket: 8 [ 1962.491772][T20258] usb 3-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 1962.520556][T20258] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1962.583160][T20258] usb 3-1: Product: syz [ 1962.600751][T20258] usb 3-1: Manufacturer: syz [ 1962.627353][T20258] usb 3-1: SerialNumber: syz [ 1962.681244][T20258] usb 3-1: config 0 descriptor?? [ 1962.730870][T20258] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 1962.897927][ T5148] Bluetooth: hci5: command 0x0406 tx timeout [ 1963.732337][T20258] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1963.917843][T20258] usb 2-1: Using ep0 maxpacket: 8 [ 1963.929534][T20258] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1963.945427][T20258] usb 2-1: config 0 has no interface number 0 [ 1963.956010][T20258] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1963.969891][T20258] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1963.982070][T20258] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1964.003614][T20258] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1964.013992][T20258] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1964.045211][T20258] usb 2-1: config 0 descriptor?? [ 1964.083664][T20258] ldusb 2-1:0.55: Interrupt in endpoint not found [ 1964.094309][T29805] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6445'. [ 1964.320440][T14260] usb 2-1: USB disconnect, device number 17 [ 1965.298165][T29816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1965.315230][T29816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1965.383782][T21184] usb 3-1: USB disconnect, device number 16 [ 1968.456606][T29840] IPVS: set_ctl: invalid protocol: 2 224.0.0.1:20002 [ 1969.428362][T29844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1969.484100][T29844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1969.967840][T21207] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1970.127399][T21207] usb 6-1: Using ep0 maxpacket: 32 [ 1970.147030][T21207] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1970.169545][T21207] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1970.205409][T21207] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1970.236953][T21207] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1970.252857][T21207] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1970.288685][T21207] usb 6-1: Product: syz [ 1970.296161][T21207] usb 6-1: Manufacturer: syz [ 1970.309301][T21207] usb 6-1: SerialNumber: syz [ 1970.743771][T29864] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6456'. [ 1971.575434][T29869] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6459'. [ 1972.162638][T29880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6461'. [ 1972.288418][T28678] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1972.457843][T28678] usb 3-1: Using ep0 maxpacket: 8 [ 1972.483455][T28678] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1972.501387][T28678] usb 3-1: config 0 has no interface number 0 [ 1972.516180][T28678] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1972.549321][T28678] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1972.573577][T28678] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1972.604274][T28678] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1972.626436][T28678] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1972.654730][T28678] usb 3-1: config 0 descriptor?? [ 1972.719276][T28678] ldusb 3-1:0.55: Interrupt in endpoint not found [ 1972.939402][T20258] usb 3-1: USB disconnect, device number 17 [ 1973.137765][T11233] Bluetooth: hci2: command 0x0406 tx timeout [ 1973.715238][T29892] netlink: 'syz.2.6465': attribute type 298 has an invalid length. [ 1973.857714][T29895] net_ratelimit: 10 callbacks suppressed [ 1973.857736][T29895] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1974.684068][T21207] usb 6-1: 0:2 : does not exist [ 1974.768541][T21207] usb 6-1: USB disconnect, device number 125 [ 1974.912781][T29903] netlink: 84 bytes leftover after parsing attributes in process `syz.5.6469'. [ 1974.982524][T19123] udevd[19123]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1975.204022][T29907] sock: sock_set_timeout: `syz.2.6470' (pid 29907) tries to set negative timeout [ 1975.277260][T21207] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1975.478130][T21207] usb 6-1: Using ep0 maxpacket: 8 [ 1975.488624][T21207] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1975.527283][T21207] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1975.565924][T21207] usb 6-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 1975.586255][T21207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1975.600785][T21207] usb 6-1: config 0 descriptor?? [ 1975.831104][T29903] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6469'. [ 1975.905383][T29920] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6469'. [ 1975.982227][T21207] usbhid 6-1:0.0: can't add hid device: -71 [ 1975.999466][T21207] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1976.036057][T21207] usb 6-1: USB disconnect, device number 126 [ 1976.267321][T28678] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1976.298801][T21184] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1976.429764][T28678] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1976.447367][T28678] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1976.459783][T28678] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1976.470184][T28678] usb 2-1: config 1 has no interface number 1 [ 1976.476423][T28678] usb 2-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 1976.485765][T21184] usb 3-1: Using ep0 maxpacket: 8 [ 1976.492731][T28678] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1976.502300][T21184] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1976.514531][T28678] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1976.530657][T21184] usb 3-1: config 0 has no interface number 0 [ 1976.536821][T28678] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1976.545745][T21184] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1976.557859][T28678] usb 2-1: Product: syz [ 1976.562887][T28678] usb 2-1: Manufacturer: syz [ 1976.568802][T21184] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1976.582518][T28678] usb 2-1: SerialNumber: syz [ 1976.592329][T21184] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1976.612216][T21184] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1976.622683][T21184] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1976.643271][T21184] usb 3-1: config 0 descriptor?? [ 1976.696139][T21184] ldusb 3-1:0.55: Interrupt in endpoint not found [ 1976.822955][T28678] usb 2-1: cannot find UAC_HEADER [ 1976.833703][T28678] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1976.870795][T28678] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1976.878301][T28678] usb 2-1: MIDIStreaming interface descriptor not found [ 1976.916207][T21184] usb 3-1: USB disconnect, device number 18 [ 1976.999347][T28678] usb 2-1: USB disconnect, device number 18 [ 1977.103072][ T7825] udevd[7825]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1977.402847][ T30] audit: type=1326 audit(1769412454.450:5375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29934 comm="syz.3.6478" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf747d539 code=0x0 [ 1977.502135][T29943] openvswitch: netlink: Message has 1 unknown bytes. [ 1977.510588][T29943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1977.717425][T28678] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1978.143953][T29951] program syz.2.6481 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1979.457484][T29983] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6487'. [ 1981.207863][T21184] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1981.313464][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.327874][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1981.417897][T21184] usb 3-1: Using ep0 maxpacket: 8 [ 1981.443143][T21184] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1981.500288][T21184] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1981.531653][T21184] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1981.564376][T21184] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1981.608330][T21184] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1981.658153][T21184] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1981.683550][T29995] syzkaller0: entered promiscuous mode [ 1981.690949][T29995] syzkaller0: entered allmulticast mode [ 1981.915991][T21184] usb 3-1: GET_CAPABILITIES returned 0 [ 1981.929745][T21184] usbtmc 3-1:16.0: can't read capabilities [ 1982.027334][ T5910] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1982.128010][ T30] audit: type=1326 audit(1769412459.180:5376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29999 comm="syz.1.6493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 1982.214502][ T5910] usb 6-1: Using ep0 maxpacket: 8 [ 1982.214529][ T30] audit: type=1326 audit(1769412459.200:5377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29999 comm="syz.1.6493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 1982.294644][ T5910] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1982.311827][ T5910] usb 6-1: config 0 has no interface number 0 [ 1982.316041][ T30] audit: type=1326 audit(1769412459.200:5378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29999 comm="syz.1.6493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 1982.336712][ T5910] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1982.363275][ T5910] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1982.377561][ T5910] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1982.400008][ T30] audit: type=1326 audit(1769412459.200:5379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29999 comm="syz.1.6493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 1982.428056][ T30] audit: type=1326 audit(1769412459.200:5380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29999 comm="syz.1.6493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 1982.457816][ T30] audit: type=1326 audit(1769412459.200:5381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29999 comm="syz.1.6493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 1982.487637][ T30] audit: type=1326 audit(1769412459.200:5382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29999 comm="syz.1.6493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 1982.510954][ T30] audit: type=1326 audit(1769412459.200:5383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29999 comm="syz.1.6493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 1982.533648][ T30] audit: type=1326 audit(1769412459.200:5384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29999 comm="syz.1.6493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 1982.556880][T30007] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6489'. [ 1982.566114][ T5910] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1982.566122][ T30] audit: type=1326 audit(1769412459.200:5385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29999 comm="syz.1.6493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 1982.608685][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1982.621421][ T5910] usb 6-1: config 0 descriptor?? [ 1982.638476][ T5910] ldusb 6-1:0.55: Interrupt in endpoint not found [ 1982.678162][ T30] audit: type=1326 audit(1769412459.200:5386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29999 comm="syz.1.6493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 1982.795014][ T30] audit: type=1326 audit(1769412459.200:5387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29999 comm="syz.1.6493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 1982.895087][T21184] usb 6-1: USB disconnect, device number 127 [ 1982.926915][ T30] audit: type=1326 audit(1769412459.200:5388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29999 comm="syz.1.6493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 1983.015849][ T30] audit: type=1326 audit(1769412459.200:5389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29999 comm="syz.1.6493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 1983.636281][T30014] openvswitch: netlink: Message has 1 unknown bytes. [ 1983.654669][T30014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1983.825375][T30019] openvswitch: netlink: Message has 1 unknown bytes. [ 1983.839815][T30019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1984.144092][ T5896] usb 3-1: USB disconnect, device number 19 [ 1985.726955][T30040] fuse: Bad value for 'user_id' [ 1985.750537][T30040] fuse: Bad value for 'user_id' [ 1985.951338][ T5910] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1986.577347][ T5910] usb 2-1: Using ep0 maxpacket: 8 [ 1986.620557][T30049] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1986.899824][T30054] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1986.938126][ T5910] usb 2-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 1986.974577][T30054] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1986.997562][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1987.019999][T30054] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1987.045294][T30054] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1987.068922][ T5910] usb 2-1: Product: syz [ 1987.085497][ T5910] usb 2-1: Manufacturer: syz [ 1987.097595][ T5910] usb 2-1: SerialNumber: syz [ 1987.116321][ T5910] usb 2-1: config 0 descriptor?? [ 1987.133568][T30055] netlink: 'syz.2.6503': attribute type 2 has an invalid length. [ 1987.142444][T30049] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1987.190430][T30055] netlink: 'syz.2.6503': attribute type 8 has an invalid length. [ 1987.218219][T30061] vhci_hcd vhci_hcd.0: pdev(5) rhport(6) sockfd(21) [ 1987.224920][T30061] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1987.239775][T30055] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6503'. [ 1987.267798][T30061] vhci_hcd vhci_hcd.0: Device attached [ 1987.462588][T21184] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1987.537421][T21184] usb 43-7: new full-speed USB device number 3 using vhci_hcd [ 1987.637886][T28678] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1987.840595][T28678] usb 6-1: Using ep0 maxpacket: 32 [ 1987.947094][T28678] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 1988.057839][T28678] usb 6-1: config 0 has no interface number 0 [ 1988.097291][T28678] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1988.210487][T28678] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1988.287233][T28678] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1988.307120][T28678] usb 6-1: Product: syz [ 1988.357421][T28678] usb 6-1: Manufacturer: syz [ 1988.423125][T28678] usb 6-1: SerialNumber: syz [ 1988.466424][ T5910] usb 2-1: can't set config #0, error -71 [ 1988.492999][T28678] usb 6-1: config 0 descriptor?? [ 1988.569900][T30069] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6505'. [ 1988.641875][ T5910] usb 2-1: USB disconnect, device number 20 [ 1988.712439][T30054] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1989.103500][T30049] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1989.808000][ T5938] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1989.991431][ T5938] usb 2-1: Using ep0 maxpacket: 8 [ 1990.023395][ T5938] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1990.047899][ T5938] usb 2-1: config 0 has no interface number 0 [ 1990.056099][T30078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1990.075418][ T5938] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1990.118483][T30078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1990.140237][ T5938] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1990.166520][ T5938] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1990.225010][ T5938] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1990.276570][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1990.302229][ T5938] usb 2-1: config 0 descriptor?? [ 1990.510794][ T5938] ldusb 2-1:0.55: Interrupt in endpoint not found [ 1990.638855][T20258] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1990.741052][ T5938] usb 2-1: USB disconnect, device number 21 [ 1990.942240][T20258] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1991.009330][T20258] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1991.048206][T28678] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1991.062624][T30062] vhci_hcd: connection reset by peer [ 1991.085008][T30072] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6507'. [ 1991.104206][T20258] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1991.110740][ T6131] vhci_hcd vhci_hcd.5: stop threads [ 1991.120449][T28678] asix 6-1:0.188: probe with driver asix failed with error -71 [ 1991.145329][ T6131] vhci_hcd vhci_hcd.5: release socket [ 1991.188629][T28678] usb 6-1: USB disconnect, device number 2 [ 1991.199489][T20258] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1991.219790][ T6131] vhci_hcd vhci_hcd.5: disconnect device [ 1991.227278][T20258] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1991.316874][T20258] usb 3-1: Product: syz [ 1991.331509][T20258] usb 3-1: Manufacturer: syz [ 1991.360108][T20258] usb 3-1: SerialNumber: syz [ 1991.392231][T20258] usb 3-1: config 0 descriptor?? [ 1991.751652][T30094] openvswitch: netlink: Message has 1 unknown bytes. [ 1991.941000][T30098] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6511'. [ 1991.967868][T30094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1992.510876][T30084] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 1992.647337][T21184] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1993.550994][T30084] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 1994.325220][T30116] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6516'. [ 1994.590605][T30098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1994.823713][T30098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1994.850847][T30098] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 1994.918924][T30098] bond0 (unregistering): Released all slaves [ 1995.345591][T20258] usb 3-1: USB disconnect, device number 20 [ 1995.831521][T30123] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6517'. [ 1996.802681][T30126] netlink: 320 bytes leftover after parsing attributes in process `syz.5.6518'. [ 1998.498796][T30147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1998.562916][T30147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1999.122889][T30162] binder: 30161:30162 ioctl c018620c 80000780 returned -22 [ 1999.209985][T30168] netlink: 'syz.1.6528': attribute type 10 has an invalid length. [ 1999.415582][T30170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6529'. [ 2000.554046][T30177] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6531'. [ 2004.259579][T30210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2004.284026][T30210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2004.656308][T30217] netlink: 88 bytes leftover after parsing attributes in process `syz.2.6542'. [ 2005.218018][ T5938] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 2005.244546][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 2005.258728][T30238] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6546'. [ 2005.388668][ T5938] usb 2-1: device descriptor read/64, error -32 [ 2005.537560][T21184] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 2005.668705][ T5938] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 2005.693038][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 2005.779658][T21184] usb 3-1: Using ep0 maxpacket: 8 [ 2005.800766][T21184] usb 3-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 2005.837409][ T5938] usb 2-1: device descriptor read/64, error -32 [ 2005.857877][T21184] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2005.917763][T21184] usb 3-1: Product: syz [ 2005.922033][T21184] usb 3-1: Manufacturer: syz [ 2005.948076][ T5938] usb usb2-port1: attempt power cycle [ 2005.953757][T21184] usb 3-1: SerialNumber: syz [ 2006.011824][T21184] usb 3-1: config 0 descriptor?? [ 2006.048132][T21184] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 2006.347890][ T5938] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 2006.407998][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 2006.417651][ T5938] usb 2-1: device descriptor read/8, error -32 [ 2006.527798][ T5938] raw-gadget.0 gadget.1: failed to queue suspend event [ 2006.541748][ T5938] raw-gadget.0 gadget.1: failed to queue reset event [ 2006.639768][ T5938] raw-gadget.0 gadget.1: failed to queue resume event [ 2006.722235][ T5938] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 2006.748205][ C1] raw-gadget.0 gadget.1: failed to queue control event [ 2006.769677][ T5938] usb 2-1: device descriptor read/8, error -32 [ 2006.888225][ T5938] raw-gadget.0 gadget.1: failed to queue suspend event [ 2006.901347][ T5938] usb usb2-port1: unable to enumerate USB device [ 2007.089127][T30248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2007.126313][T30248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2007.163939][T30218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2007.186031][T30218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2007.298165][T11233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2007.310817][T11233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2007.321844][T11233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2007.331801][T11233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2007.341126][T11233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2007.676369][T30253] chnl_net:caif_netlink_parms(): no params data found [ 2007.895492][ T9702] usb 3-1: USB disconnect, device number 21 [ 2007.975174][T30253] bridge0: port 1(bridge_slave_0) entered blocking state [ 2007.984661][T30253] bridge0: port 1(bridge_slave_0) entered disabled state [ 2007.994000][T30253] bridge_slave_0: entered allmulticast mode [ 2008.004231][T30253] bridge_slave_0: entered promiscuous mode [ 2008.014492][T30253] bridge0: port 2(bridge_slave_1) entered blocking state [ 2008.023320][T30253] bridge0: port 2(bridge_slave_1) entered disabled state [ 2008.034952][T30253] bridge_slave_1: entered allmulticast mode [ 2008.061705][T30253] bridge_slave_1: entered promiscuous mode [ 2008.214085][T30253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2008.234681][T30253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2008.279630][T30253] team0: Port device team_slave_0 added [ 2008.294267][T30253] team0: Port device team_slave_1 added [ 2008.355207][T30253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2008.362631][T30253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2008.392554][T30253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2008.407454][T30272] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6556'. [ 2008.430176][T30253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2008.438354][T30253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2008.468002][T30253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2008.539344][T30253] hsr_slave_0: entered promiscuous mode [ 2008.546754][T30253] hsr_slave_1: entered promiscuous mode [ 2008.567036][T30253] debugfs: 'hsr0' already exists in 'hsr' [ 2008.595937][T30253] Cannot create hsr debugfs directory [ 2008.867079][T30219] raw-gadget.0 gadget.1: failed to queue disconnect event [ 2009.383493][T30282] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6559'. [ 2009.395120][T11233] Bluetooth: hci1: command tx timeout [ 2010.444542][T30253] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2010.478809][T30253] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2010.510709][T30253] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2010.535204][T30253] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2011.003035][T30253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2011.140219][T30253] 8021q: adding VLAN 0 to HW filter on device team0 [ 2011.252948][T30304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2011.272117][T30304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2011.332684][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 2011.340041][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2011.459175][T11233] Bluetooth: hci1: command tx timeout [ 2011.571161][T21612] bridge0: port 2(bridge_slave_1) entered blocking state [ 2011.578418][T21612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2012.019778][ T3510] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2012.308100][ T5148] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2012.321571][ T5148] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2012.332420][ T5148] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2012.344858][ T5148] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2012.353031][ T5148] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2012.409837][ T3510] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2012.666030][ T3510] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2012.814408][ T3510] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2013.282939][T30253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2013.540064][T11233] Bluetooth: hci1: command tx timeout [ 2013.658514][T30320] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6568'. [ 2013.690323][ T3510] bridge_slave_1: left allmulticast mode [ 2013.720569][ T3510] bridge_slave_1: left promiscuous mode [ 2013.749863][ T3510] bridge0: port 2(bridge_slave_1) entered disabled state [ 2013.811963][ T3510] bridge_slave_0: left allmulticast mode [ 2013.831081][ T3510] bridge_slave_0: left promiscuous mode [ 2013.846445][ T3510] bridge0: port 1(bridge_slave_0) entered disabled state [ 2014.417402][T11233] Bluetooth: hci2: command tx timeout [ 2015.244999][T30312] chnl_net:caif_netlink_parms(): no params data found [ 2015.635951][T30346] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6576'. [ 2015.647266][T11233] Bluetooth: hci1: command tx timeout [ 2015.741943][ T3510] hsr_slave_0: left promiscuous mode [ 2015.752746][ T3510] hsr_slave_1: left promiscuous mode [ 2015.766483][ T3510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2015.788816][ T3510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2015.805358][ T3510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2015.843822][ T3510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2015.954119][ T3510] veth1_macvtap: left promiscuous mode [ 2015.964676][ T3510] veth0_macvtap: left promiscuous mode [ 2015.976402][ T3510] veth1_vlan: left promiscuous mode [ 2015.989370][ T3510] veth0_vlan: left promiscuous mode [ 2016.497915][T11233] Bluetooth: hci2: command tx timeout [ 2018.577996][T11233] Bluetooth: hci2: command tx timeout [ 2018.599424][ T3510] team0 (unregistering): Port device team_slave_1 removed [ 2018.741491][ T3510] team0 (unregistering): Port device team_slave_0 removed [ 2018.941808][T30373] sock: sock_set_timeout: `syz.2.6578' (pid 30373) tries to set negative timeout [ 2019.353795][ T5197] udevd[5197]: worker [19124] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time [ 2019.956986][T30253] veth0_vlan: entered promiscuous mode [ 2020.340868][T30312] bridge0: port 1(bridge_slave_0) entered blocking state [ 2020.379206][T30312] bridge0: port 1(bridge_slave_0) entered disabled state [ 2020.399896][T30312] bridge_slave_0: entered allmulticast mode [ 2020.427548][T30312] bridge_slave_0: entered promiscuous mode [ 2020.459281][T30312] bridge0: port 2(bridge_slave_1) entered blocking state [ 2020.479934][T30312] bridge0: port 2(bridge_slave_1) entered disabled state [ 2020.522130][T30312] bridge_slave_1: entered allmulticast mode [ 2020.529976][T30312] bridge_slave_1: entered promiscuous mode [ 2020.553825][T30253] veth1_vlan: entered promiscuous mode [ 2020.659415][T11233] Bluetooth: hci2: command tx timeout [ 2020.722312][T30312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2020.776817][T30312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2020.940161][T30391] openvswitch: netlink: Message has 1 unknown bytes. [ 2020.965336][T30391] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2021.141326][T30312] team0: Port device team_slave_0 added [ 2021.188147][T30253] veth0_macvtap: entered promiscuous mode [ 2021.236005][T30312] team0: Port device team_slave_1 added [ 2021.451422][T30253] veth1_macvtap: entered promiscuous mode [ 2021.558053][T30312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2021.587300][T30312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2021.647599][T30312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2021.790223][T30312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2021.872468][T30312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2021.967619][T30312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2022.484799][T30253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2022.648561][T30312] hsr_slave_0: entered promiscuous mode [ 2022.676317][T30312] hsr_slave_1: entered promiscuous mode [ 2022.693191][T30312] debugfs: 'hsr0' already exists in 'hsr' [ 2022.733077][T30312] Cannot create hsr debugfs directory [ 2022.832337][T30253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2023.209790][T30419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2023.280688][T30419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2023.301317][ T6131] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2023.327810][ T6131] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2023.336601][ T6131] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2023.402955][ T6131] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2024.011169][T28542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2024.032848][T28542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2024.267539][T30441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2024.293423][T30441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2024.314920][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2024.346966][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2024.558842][T28678] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 2024.771701][T30457] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6600'. [ 2024.795893][T28678] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2024.838580][T28678] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2024.861057][T28678] usb 3-1: Product: syz [ 2024.865776][T28678] usb 3-1: Manufacturer: syz [ 2024.871201][T28678] usb 3-1: SerialNumber: syz [ 2025.385803][T28678] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2025.432529][T28678] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2025.461429][T30312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2025.529757][T30312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2025.575683][T30312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2025.632039][T30312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2026.301211][T30312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2026.470765][T30312] 8021q: adding VLAN 0 to HW filter on device team0 [ 2026.553377][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 2026.560647][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2026.640990][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 2026.648232][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2026.746557][T30445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2026.790988][T30445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2026.875451][T30445] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6591'. [ 2027.072458][T28678] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 2027.101835][T28678] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2027.156732][T28678] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2027.227669][T28678] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 2027.318085][T28678] usb 3-1: USB disconnect, device number 22 [ 2027.345520][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 2027.345541][ T30] audit: type=1326 audit(1769412504.390:5410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30484 comm="syz.5.6592" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f45539 code=0x0 [ 2027.514786][T30312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2027.642996][T30312] veth0_vlan: entered promiscuous mode [ 2027.675181][T30312] veth1_vlan: entered promiscuous mode [ 2027.698742][ T30] audit: type=1326 audit(1769412504.750:5411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30492 comm="syz.3.6594" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf739d539 code=0x0 [ 2027.744465][T30495] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6593'. [ 2027.843890][T30312] veth0_macvtap: entered promiscuous mode [ 2027.874185][T30312] veth1_macvtap: entered promiscuous mode [ 2027.931443][T30312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2027.955965][T30312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2028.013332][T28542] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2028.036887][T28542] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2028.048115][T28542] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2028.057034][T28542] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2028.380764][T21612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2028.426110][T21612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2028.605204][T21612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2028.627553][T21612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2031.107721][T30555] openvswitch: netlink: Message has 1 unknown bytes. [ 2031.114601][T30555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2031.529195][T30561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2031.574755][T30561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2032.087697][T21184] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2032.371949][T21184] usb 2-1: Using ep0 maxpacket: 8 [ 2033.064225][T21184] usb 2-1: device descriptor read/all, error -71 [ 2033.631737][T30580] openvswitch: netlink: Message has 1 unknown bytes. [ 2033.687728][T30580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2034.181762][T30586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6608'. [ 2034.378688][ T30] audit: type=1326 audit(1769412511.430:5412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30589 comm="syz.5.6609" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f45539 code=0x0 [ 2034.579348][ T30] audit: type=1326 audit(1769412511.630:5413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30596 comm="syz.0.6611" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f84539 code=0x0 [ 2034.930244][T30604] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6612'. [ 2037.158890][T30622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2037.199208][T30622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2037.445962][T30626] netlink: 168 bytes leftover after parsing attributes in process `syz.5.6616'. [ 2038.437406][ T5896] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 2038.627245][ T5896] usb 3-1: Using ep0 maxpacket: 8 [ 2038.644430][ T5896] usb 3-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 2038.655393][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2038.664370][ T5896] usb 3-1: Product: syz [ 2038.680152][ T5896] usb 3-1: Manufacturer: syz [ 2038.689499][ T5896] usb 3-1: SerialNumber: syz [ 2038.702333][ T5896] usb 3-1: config 0 descriptor?? [ 2038.726291][ T5896] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 2038.915087][ T5896] usb 3-1: USB disconnect, device number 23 [ 2040.195233][T30657] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6623'. [ 2040.345450][T30656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2040.366591][T30656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2041.003107][T30662] sock: sock_set_timeout: `syz.3.6625' (pid 30662) tries to set negative timeout [ 2041.407300][ T9702] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2041.648061][ T9702] usb 3-1: Using ep0 maxpacket: 8 [ 2041.676442][ T9702] usb 3-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 2041.715806][ T9702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2041.743050][ T9702] usb 3-1: Product: syz [ 2041.772790][ T9702] usb 3-1: Manufacturer: syz [ 2041.966697][ T9702] usb 3-1: SerialNumber: syz [ 2042.089554][T30674] QAT: failed to copy from user. [ 2042.171692][ T9702] usb 3-1: config 0 descriptor?? [ 2042.226546][ T9702] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 2042.819586][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2042.826421][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2043.647999][ T5896] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2043.740871][ T9702] usb 3-1: USB disconnect, device number 24 [ 2043.837253][ T5896] usb 2-1: Using ep0 maxpacket: 8 [ 2043.854598][ T5896] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 2043.866536][ T5896] usb 2-1: config 0 has no interface number 0 [ 2043.898043][ T5896] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2043.911833][ T5896] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2043.927329][ T5896] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2043.942517][ T5896] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2043.980087][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2044.012489][ T5896] usb 2-1: config 0 descriptor?? [ 2044.048618][ T5896] ldusb 2-1:0.55: Interrupt in endpoint not found [ 2046.405275][T21207] usb 2-1: USB disconnect, device number 28 [ 2046.558078][T30722] trusted_key: encrypted_key: insufficient parameters specified [ 2046.790824][T30733] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6638'. [ 2047.290619][T30738] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6641'. [ 2047.361209][T30738] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6641'. [ 2048.689671][T30749] sock: sock_set_timeout: `syz.0.6654' (pid 30749) tries to set negative timeout [ 2049.004191][T28678] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 2049.179109][T28678] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2049.265191][T28678] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 2049.322104][T30774] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6647'. [ 2049.346831][T28678] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 2049.461447][T28678] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2049.572790][T28678] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2049.663231][T28678] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2049.705209][T28678] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2049.756855][T28678] usb 6-1: Product: syz [ 2049.775367][T28678] usb 6-1: Manufacturer: syz [ 2049.823953][T28678] usb 6-1: SerialNumber: syz [ 2049.873453][T28678] usb 6-1: config 0 descriptor?? [ 2049.925542][T30780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2049.978593][T30780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2050.168643][T28678] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 2050.196152][T28678] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 2050.369738][T28678] radio-si470x 6-1:0.0: software version 0, hardware version 0 [ 2050.414077][T28678] radio-si470x 6-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 2050.460688][T28678] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 2050.580473][T28678] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 2051.028655][T20258] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2051.197202][T20258] usb 2-1: Using ep0 maxpacket: 8 [ 2051.230166][T28678] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 2051.246686][T20258] usb 2-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 2051.263647][T20258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2051.269207][T28678] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22 [ 2051.275217][T20258] usb 2-1: Product: syz [ 2051.289203][T20258] usb 2-1: Manufacturer: syz [ 2051.294162][T20258] usb 2-1: SerialNumber: syz [ 2051.332250][T28678] usb 6-1: USB disconnect, device number 3 [ 2051.334427][T20258] usb 2-1: config 0 descriptor?? [ 2051.472018][T20258] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 2051.650603][T28678] usb 2-1: USB disconnect, device number 29 [ 2052.133016][T30802] openvswitch: netlink: Message has 1 unknown bytes. [ 2052.145737][T30802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2052.192189][T30804] openvswitch: netlink: Message has 1 unknown bytes. [ 2052.207906][T30804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2053.158596][T20258] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2053.390856][T20258] usb 2-1: Using ep0 maxpacket: 8 [ 2053.440856][T20258] usb 2-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 2053.490968][T20258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2053.528907][T20258] usb 2-1: Product: syz [ 2053.542134][T20258] usb 2-1: Manufacturer: syz [ 2053.556773][T20258] usb 2-1: SerialNumber: syz [ 2053.594889][T20258] usb 2-1: config 0 descriptor?? [ 2053.677731][T20258] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 2054.778663][T28542] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2055.389221][T28542] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2055.624735][T21207] usb 2-1: USB disconnect, device number 30 [ 2055.721372][T28542] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2055.806669][ T5148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2055.820172][ T5148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2055.829862][ T5148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2055.878642][ T5148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2055.887764][ T5148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2056.804764][T28542] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2057.227292][T20258] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 2057.397864][T20258] usb 3-1: Using ep0 maxpacket: 8 [ 2057.410144][T20258] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 2057.429940][T20258] usb 3-1: config 0 has no interface number 0 [ 2057.438003][T20258] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2057.449856][T20258] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2057.463515][T20258] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2057.476910][T20258] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2057.566079][T28542] bridge_slave_1: left allmulticast mode [ 2057.583291][T28542] bridge_slave_1: left promiscuous mode [ 2057.597655][T28542] bridge0: port 2(bridge_slave_1) entered disabled state [ 2057.615622][T20258] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2057.723025][T20258] usb 3-1: config 0 descriptor?? [ 2057.732717][T28542] bridge_slave_0: left allmulticast mode [ 2057.754748][T28542] bridge_slave_0: left promiscuous mode [ 2057.755172][T20258] ldusb 3-1:0.55: Interrupt in endpoint not found [ 2057.775881][T28542] bridge0: port 1(bridge_slave_0) entered disabled state [ 2057.939518][T11233] Bluetooth: hci1: command tx timeout [ 2058.202908][T30860] openvswitch: netlink: Message has 1 unknown bytes. [ 2058.212363][T30860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2058.327241][T28678] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2058.481759][T28678] usb 2-1: Using ep0 maxpacket: 8 [ 2058.541167][T28678] usb 2-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 2058.578351][T28678] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2058.587972][T28678] usb 2-1: Product: syz [ 2058.592285][T28678] usb 2-1: Manufacturer: syz [ 2058.597030][T28678] usb 2-1: SerialNumber: syz [ 2058.623947][T28678] usb 2-1: config 0 descriptor?? [ 2058.666716][T28678] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 2059.263590][T28542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2059.344948][T28542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2059.384614][T28542] bond0 (unregistering): Released all slaves [ 2059.834508][T30867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2059.893801][T30867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2059.926139][T20258] usb 3-1: USB disconnect, device number 25 [ 2059.935419][T30833] chnl_net:caif_netlink_parms(): no params data found [ 2060.011055][T30693] usb 2-1: USB disconnect, device number 31 [ 2060.018055][T11233] Bluetooth: hci1: command tx timeout [ 2060.153672][T30874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2060.174309][T30874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2060.211834][T30874] input: syz1 as /devices/virtual/input/input169 [ 2060.496894][T28542] hsr_slave_0: left promiscuous mode [ 2060.520865][T28542] hsr_slave_1: left promiscuous mode [ 2060.532332][T28542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2060.540783][T28542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2060.547585][ T5938] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2060.556950][T28542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2060.566199][T28542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2060.603265][T28542] veth1_macvtap: left promiscuous mode [ 2060.611191][T28542] veth0_macvtap: left promiscuous mode [ 2060.631843][T28542] veth1_vlan: left promiscuous mode [ 2060.644278][T28542] veth0_vlan: left promiscuous mode [ 2060.713482][ T5938] usb 2-1: Using ep0 maxpacket: 8 [ 2060.726547][ T5938] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2060.754691][ T5938] usb 2-1: config 5 has an invalid interface number: 215 but max is 0 [ 2060.772382][ T5938] usb 2-1: config 5 has no interface number 0 [ 2060.787296][ T5938] usb 2-1: config 5 interface 215 has no altsetting 0 [ 2060.823506][ T5938] usb 2-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba [ 2060.841445][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2060.859394][ T5938] usb 2-1: Product: syz [ 2060.876351][ T5938] usb 2-1: Manufacturer: syz [ 2060.883855][ T5938] usb 2-1: SerialNumber: syz [ 2061.132948][ T5938] cypress_m8 2-1:5.215: DeLorme Earthmate USB converter detected [ 2061.152295][ T5938] usb 2-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 2061.177453][ T5938] usb 2-1: USB disconnect, device number 32 [ 2061.208177][ T5938] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 2061.244596][ T5938] cypress_m8 2-1:5.215: device disconnected [ 2062.097993][T11233] Bluetooth: hci1: command tx timeout [ 2062.216413][T28542] team0 (unregistering): Port device team_slave_1 removed [ 2062.379922][T28542] team0 (unregistering): Port device team_slave_0 removed [ 2063.376757][T30917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2063.428083][T30917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2063.763945][T30922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6681'. [ 2064.051486][T30904] netlink: 192 bytes leftover after parsing attributes in process `syz.5.6678'. [ 2064.177340][T11233] Bluetooth: hci1: command tx timeout [ 2064.301894][T30833] bridge0: port 1(bridge_slave_0) entered blocking state [ 2064.330270][T30833] bridge0: port 1(bridge_slave_0) entered disabled state [ 2064.340707][T30833] bridge_slave_0: entered allmulticast mode [ 2064.364082][T30833] bridge_slave_0: entered promiscuous mode [ 2064.374066][T30833] bridge0: port 2(bridge_slave_1) entered blocking state [ 2064.391068][T30833] bridge0: port 2(bridge_slave_1) entered disabled state [ 2064.406812][T30833] bridge_slave_1: entered allmulticast mode [ 2064.485460][T30833] bridge_slave_1: entered promiscuous mode [ 2064.595607][T30833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2064.640961][T30833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2064.763173][T30833] team0: Port device team_slave_0 added [ 2064.795829][T30833] team0: Port device team_slave_1 added [ 2065.050364][T30833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2065.077011][T30833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2065.172074][T30833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2065.387384][T21207] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2065.602202][T30833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2065.638053][T21207] usb 2-1: Using ep0 maxpacket: 8 [ 2065.644741][T30833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2065.739888][T30833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2066.060365][T30833] hsr_slave_0: entered promiscuous mode [ 2066.129248][T30833] hsr_slave_1: entered promiscuous mode [ 2066.162213][T30833] debugfs: 'hsr0' already exists in 'hsr' [ 2066.218964][T30833] Cannot create hsr debugfs directory [ 2066.594228][T30950] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6685'. [ 2067.057574][ T31] INFO: task kworker/0:2:26445 blocked for more than 143 seconds. [ 2067.065470][ T31] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2067.113726][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2067.147215][ T31] task:kworker/0:2 state:D stack:21176 pid:26445 tgid:26445 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2067.228378][ T31] Workqueue: usb_hub_wq hub_event [ 2067.672203][ T31] Call Trace: [ 2067.675610][ T31] [ 2067.712296][ T31] __schedule+0x14ef/0x4fb0 [ 2067.743432][ T31] ? stack_trace_save+0xa9/0x100 [ 2067.788668][ T31] ? __pfx___schedule+0x10/0x10 [ 2067.823966][ T31] ? schedule+0x90/0x360 [ 2067.854571][ T31] schedule+0x164/0x360 [ 2067.908901][ T31] schedule_timeout+0xc3/0x2c0 [ 2067.913795][ T31] ? irqentry_exit+0x59c/0x620 [ 2067.958515][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 2067.964019][ T31] ? wait_for_completion+0x274/0x5e0 [ 2067.997299][ T31] wait_for_completion+0x2cc/0x5e0 [ 2068.002719][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 2068.048361][ T31] pn533_usb_send_frame+0x31d/0x5e0 [ 2068.053712][ T31] ? __pfx_pn533_usb_send_frame+0x10/0x10 [ 2068.059748][ T31] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 2068.065399][ T31] ? __pn533_send_async+0x70/0x640 [ 2068.072729][ T31] ? pn533_std_tx_frame_finish+0x302/0x3b0 [ 2068.079153][ T31] __pn533_send_async+0x41f/0x640 [ 2068.084305][ T31] pn533_finalize_setup+0x245/0x7a0 [ 2068.090300][ T31] ? __pfx_pn533_finalize_setup+0x10/0x10 [ 2068.096141][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 2068.133404][ T31] ? pn53x_common_init+0x95b/0xa90 [ 2068.139114][ T31] pn533_usb_probe+0xebc/0x1220 [ 2068.144085][ T31] ? __pfx_pn533_usb_probe+0x10/0x10 [ 2068.156806][ T31] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2068.164169][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 2068.169795][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2068.187275][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 2068.193042][ T31] usb_probe_interface+0x668/0xc90 [ 2068.201376][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 2068.207525][ T31] really_probe+0x267/0xaf0 [ 2068.212128][ T31] __driver_probe_device+0x18c/0x320 [ 2068.218936][ T31] driver_probe_device+0x4f/0x240 [ 2068.224103][ T31] __device_attach_driver+0x279/0x430 [ 2068.238474][ T31] bus_for_each_drv+0x258/0x2f0 [ 2068.243440][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 2068.250718][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 2068.256615][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 2068.262491][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2068.268737][ T31] __device_attach+0x2c5/0x450 [ 2068.273575][ T31] ? __pfx___device_attach+0x10/0x10 [ 2068.281715][ T31] ? _raw_spin_unlock+0x28/0x50 [ 2068.286655][ T31] device_initial_probe+0xa1/0xd0 [ 2068.292005][ T31] bus_probe_device+0x12a/0x220 [ 2068.296965][ T31] ? device_add+0x726/0xb70 [ 2068.301765][ T31] device_add+0x7b6/0xb70 [ 2068.306227][ T31] usb_set_configuration+0x1a87/0x2110 [ 2068.312666][ T31] usb_generic_driver_probe+0x8d/0x150 [ 2068.318391][ T31] usb_probe_device+0x1c4/0x3b0 [ 2068.323357][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 2068.329700][ T31] really_probe+0x267/0xaf0 [ 2068.334328][ T31] __driver_probe_device+0x18c/0x320 [ 2068.343051][ T31] driver_probe_device+0x4f/0x240 [ 2068.348335][ T31] __device_attach_driver+0x279/0x430 [ 2068.354256][ T31] bus_for_each_drv+0x258/0x2f0 [ 2068.359347][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 2068.365322][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 2068.371704][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 2068.376996][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2068.383918][ T31] __device_attach+0x2c5/0x450 [ 2068.388813][ T31] ? __pfx___device_attach+0x10/0x10 [ 2068.394188][ T31] ? _raw_spin_unlock+0x28/0x50 [ 2068.400013][ T31] device_initial_probe+0xa1/0xd0 [ 2068.405132][ T31] bus_probe_device+0x12a/0x220 [ 2068.410100][ T31] ? device_add+0x726/0xb70 [ 2068.414683][ T31] device_add+0x7b6/0xb70 [ 2068.419314][ T31] usb_new_device+0xa08/0x16f0 [ 2068.424192][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 2068.430338][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2068.435609][ T31] hub_event+0x2a1c/0x4f30 [ 2068.440358][ T31] ? __pfx_hub_event+0x10/0x10 [ 2068.445221][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 2068.451082][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 2068.456883][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 2068.463643][ T31] process_scheduled_works+0xaec/0x17a0 [ 2068.469334][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2068.475440][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 2068.481770][ T31] ? assign_work+0x3d3/0x440 [ 2068.486512][ T31] worker_thread+0x89f/0xd90 [ 2068.492352][ T31] ? __kthread_parkme+0x7a/0x1f0 [ 2068.497758][ T31] kthread+0x726/0x8b0 [ 2068.501925][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2068.507678][ T31] ? __pfx_kthread+0x10/0x10 [ 2068.512425][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2068.519015][ T31] ? __pfx_kthread+0x10/0x10 [ 2068.523793][ T31] ret_from_fork+0x51b/0xa40 [ 2068.528559][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2068.533759][ T31] ? __switch_to+0xc82/0x1410 [ 2068.538650][ T31] ? __pfx_kthread+0x10/0x10 [ 2068.543352][ T31] ret_from_fork_asm+0x1a/0x30 [ 2068.549026][ T31] [ 2068.552225][ T31] [ 2068.552225][ T31] Showing all locks held in the system: [ 2068.716449][ T31] 1 lock held by khungtaskd/31: [ 2068.722339][ T31] #0: ffffffff8e35a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2068.805650][ T31] 6 locks held by kworker/u8:5/80: [ 2068.868104][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa9/0x140 [ 2068.895404][ C0] usb 1-1: NFC: Urb failure (status -71) [ 2068.917727][ C0] usb 1-1: NFC: Urb failure (status -71) [ 2068.927945][T26445] usb 1-1: NFC: Unable to get FW version [ 2068.934217][T26445] pn533_usb 1-1:0.113: probe with driver pn533_usb failed with error -71 [ 2068.943275][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 2068.977198][ T31] #2: ffff8880b8728258 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x5ed/0xc30 [ 2069.013758][T26445] usb 1-1: USB disconnect, device number 44 [ 2069.035713][ T31] #3: ffffffff99df2508 (&____s->seqcount#2){----}-{0:0}, at: ktime_get+0x45/0x200 [ 2069.079059][ T31] #4: ffff88805c490e18 (&bat_priv->forw_bat_list_lock){+...}-{3:3}, at: batadv_forw_packet_queue+0x33/0x240 [ 2069.119651][ T31] #5: ffffffff9a014008 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 2069.148175][ T31] 1 lock held by dhcpcd/5492: [ 2069.152918][ T31] #0: ffffffff8f7a9d88 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x32b/0x1b30 [ 2069.187252][ T31] 2 locks held by getty/5583: [ 2069.192021][ T31] #0: ffff888034f450a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2069.217442][ T31] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 2069.243515][ T31] 3 locks held by kworker/0:3/20258: [ 2069.257471][ T31] #0: ffff88813fe15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 2069.300184][ T31] #1: ffffc900052c7bc0 (key_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 2069.338349][ T31] #2: ffffffff8e360c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 2069.356250][ T31] 3 locks held by kworker/1:1/21207: [ 2069.377510][ T31] #0: ffff88801d6cad48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 2069.398301][ T31] #1: ffffc900000f7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 2069.427934][ T31] #2: ffff888028cf3198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 2069.436934][ T31] 5 locks held by kworker/u8:0/28542: [ 2069.458058][ T31] #0: ffff88801b29f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 2069.471197][ T31] #1: ffffc9000c93fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 2069.481904][ T31] #2: ffffffff8f79b410 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xfe/0x7b0 [ 2069.492258][ T31] #3: ffff88805a6c94e8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x310 [ 2069.502416][ T31] #4: ffffffff8e360b40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 2069.522511][ T31] 3 locks held by kworker/0:1/30693: [ 2069.528040][ T31] #0: ffff88813fe15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 2069.540510][ T31] #1: ffffc90003cf7bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 2069.551731][ T31] #2: ffffffff8e360c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 2069.562895][ T31] 2 locks held by syz.0.6680/30916: [ 2069.568188][ T31] #0: ffffffff8f79b410 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cb/0x570 [ 2069.580500][ T31] #1: ffffffff8f7a9d88 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x88/0x290 [ 2069.590656][ T31] 4 locks held by syz.1.6684/30937: [ 2069.595895][ T31] #0: ffff8880655a0ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 2069.605973][ T31] #1: ffff8880655a00c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 2069.617283][ T31] #2: ffffffff8f936148 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 2069.627581][ T31] #3: ffff888078eddb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5b0 [ 2069.636982][ T31] 1 lock held by syz.5.6685/30952: [ 2069.643046][ T31] #0: ffffffff8f7a9d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 2069.653864][ T31] [ 2069.656262][ T31] ============================================= [ 2069.656262][ T31] [ 2069.698132][ T31] NMI backtrace for cpu 0 [ 2069.698157][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2069.698184][ T31] Tainted: [L]=SOFTLOCKUP [ 2069.698191][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2069.698204][ T31] Call Trace: [ 2069.698213][ T31] [ 2069.698222][ T31] dump_stack_lvl+0xe8/0x150 [ 2069.698253][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 2069.698276][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2069.698299][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2069.698325][ T31] sys_info+0x135/0x170 [ 2069.698344][ T31] watchdog+0xf90/0xfe0 [ 2069.698377][ T31] ? watchdog+0x209/0xfe0 [ 2069.698412][ T31] kthread+0x726/0x8b0 [ 2069.698442][ T31] ? __pfx_watchdog+0x10/0x10 [ 2069.698469][ T31] ? __pfx_kthread+0x10/0x10 [ 2069.698498][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2069.698522][ T31] ? __pfx_kthread+0x10/0x10 [ 2069.698549][ T31] ret_from_fork+0x51b/0xa40 [ 2069.698574][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2069.698593][ T31] ? __switch_to+0xc82/0x1410 [ 2069.698625][ T31] ? __pfx_kthread+0x10/0x10 [ 2069.698652][ T31] ret_from_fork_asm+0x1a/0x30 [ 2069.698696][ T31] [ 2069.698705][ T31] Sending NMI from CPU 0 to CPUs 1: [ 2069.829914][ C1] NMI backtrace for cpu 1 [ 2069.829934][ C1] CPU: 1 UID: 0 PID: 3510 Comm: kworker/u8:10 Tainted: G L syzkaller #0 PREEMPT(full) [ 2069.829965][ C1] Tainted: [L]=SOFTLOCKUP [ 2069.829973][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2069.829985][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 2069.830025][ C1] RIP: 0010:lock_release+0x266/0x3a0 [ 2069.830046][ C1] Code: 89 f6 48 8b 54 24 18 e8 e8 2e 00 00 48 8b 5c 24 08 48 c7 c7 68 93 d3 8d e8 47 67 d9 09 b8 ff ff ff ff 65 0f c1 05 9a 82 30 11 <83> f8 01 75 2e 9c 58 a9 00 02 00 00 75 42 f7 c3 00 02 00 00 75 47 [ 2069.830061][ C1] RSP: 0018:ffffc9000c6073f0 EFLAGS: 00000057 [ 2069.830075][ C1] RAX: 0000000000000001 RBX: 0000000000000202 RCX: 0000000080000001 [ 2069.830087][ C1] RDX: 0000000000000004 RSI: ffffffff8dd39368 RDI: ffffffff8be73880 [ 2069.830100][ C1] RBP: ffff888030fd2a50 R08: ffffc9000c607980 R09: 0000000000000000 [ 2069.830113][ C1] R10: ffffc9000c607578 R11: fffff520018c0eb1 R12: 0000000000000004 [ 2069.830126][ C1] R13: 0000000000000004 R14: ffffffff8e35a360 R15: ffff888030fd1e80 [ 2069.830138][ C1] FS: 0000000000000000(0000) GS:ffff888125a26000(0000) knlGS:0000000000000000 [ 2069.830153][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2069.830165][ C1] CR2: 00005654a3790928 CR3: 0000000032442000 CR4: 00000000003526f0 [ 2069.830186][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2069.830197][ C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2069.830208][ C1] Call Trace: [ 2069.830215][ C1] [ 2069.830223][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 2069.830248][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 2069.830269][ C1] unwind_next_frame+0x1aaa/0x23c0 [ 2069.830294][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 2069.830315][ C1] ? __alloc_skb+0x1d7/0x390 [ 2069.830343][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2069.830370][ C1] arch_stack_walk+0x11b/0x150 [ 2069.830394][ C1] ? nsim_dev_trap_report_work+0x29a/0xb80 [ 2069.830419][ C1] stack_trace_save+0xa9/0x100 [ 2069.830444][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 2069.830472][ C1] ? stack_trace_save+0xa9/0x100 [ 2069.830497][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 2069.830523][ C1] kasan_save_track+0x3e/0x80 [ 2069.830541][ C1] ? kasan_save_track+0x3e/0x80 [ 2069.830556][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 2069.830574][ C1] ? kmem_cache_alloc_node_noprof+0x427/0x6f0 [ 2069.830601][ C1] ? __alloc_skb+0x1d7/0x390 [ 2069.830650][ C1] __kasan_slab_alloc+0x6c/0x80 [ 2069.830670][ C1] kmem_cache_alloc_node_noprof+0x427/0x6f0 [ 2069.830697][ C1] ? __alloc_skb+0x1d7/0x390 [ 2069.830721][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 2069.830741][ C1] ? __alloc_skb+0x193/0x390 [ 2069.830765][ C1] __alloc_skb+0x1d7/0x390 [ 2069.830792][ C1] nsim_dev_trap_report_work+0x29a/0xb80 [ 2069.830823][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 2069.830842][ C1] process_scheduled_works+0xaec/0x17a0 [ 2069.830875][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 2069.830892][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 2069.830919][ C1] ? assign_work+0x3d3/0x440 [ 2069.830939][ C1] worker_thread+0x89f/0xd90 [ 2069.830976][ C1] kthread+0x726/0x8b0 [ 2069.831000][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2069.831018][ C1] ? __pfx_kthread+0x10/0x10 [ 2069.831042][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2069.831065][ C1] ? __pfx_kthread+0x10/0x10 [ 2069.831092][ C1] ret_from_fork+0x51b/0xa40 [ 2069.831111][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2069.831128][ C1] ? __switch_to+0xc82/0x1410 [ 2069.831155][ C1] ? __pfx_kthread+0x10/0x10 [ 2069.831178][ C1] ret_from_fork_asm+0x1a/0x30 [ 2069.831211][ C1] [ 2070.257787][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2070.264706][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2070.275436][ T31] Tainted: [L]=SOFTLOCKUP [ 2070.279794][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2070.289893][ T31] Call Trace: [ 2070.293211][ T31] [ 2070.296176][ T31] vpanic+0x1e0/0x670 [ 2070.300212][ T31] panic+0xc5/0xd0 [ 2070.303975][ T31] ? __pfx_panic+0x10/0x10 [ 2070.308441][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2070.313904][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2070.320108][ T31] watchdog+0xfda/0xfe0 [ 2070.324315][ T31] ? watchdog+0x209/0xfe0 [ 2070.328689][ T31] kthread+0x726/0x8b0 [ 2070.332794][ T31] ? __pfx_watchdog+0x10/0x10 [ 2070.337537][ T31] ? __pfx_kthread+0x10/0x10 [ 2070.342181][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2070.347415][ T31] ? __pfx_kthread+0x10/0x10 [ 2070.352130][ T31] ret_from_fork+0x51b/0xa40 [ 2070.356754][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2070.361931][ T31] ? __switch_to+0xc82/0x1410 [ 2070.366647][ T31] ? __pfx_kthread+0x10/0x10 [ 2070.371272][ T31] ret_from_fork_asm+0x1a/0x30 [ 2070.376081][ T31] [ 2070.379717][ T31] Kernel Offset: disabled [ 2070.384063][ T31] Rebooting in 86400 seconds..